zerqithEffective date: October, 2026
This policy explains how Zerqith.com ("we", "us") handles personal information in connection with Flexi Blocks (the "App"), a Shopify app that lets merchants build and display promotion and announcement bars, cards and similar blocks on their online store. It applies to merchants who install the App, their staff, and visitors to a merchant's store where Flexi Blocks content is displayed.
Our website privacy policy covers our website, documentation and general support. This policy is specific to the App and is complete on its own for App-related processing.
Questions or requests: [email protected]
1. Who is responsible for what
Merchants decide how their store is run and what is shown to visitors. For information about a merchant's customers and visitors, the merchant is the controller (or "business"), and we act only as the merchant's service provider (or "processor").
We are the controller (or "business") for information we use to operate the App itself: merchant and staff account details, installation and subscription records, support, and security.
2. Information we handle
Merchant and staff information
When a merchant installs or uses the App, Shopify provides us with information needed to run the App for that store. This is kept in our authentication session records and may include:
- the store's Shopify domain and identifiers;
- the name, email address, locale, user identifier and account role (such as account owner or collaborator) of staff users who open the App;
- the access permissions (scopes) granted to the App; and
- access tokens and refresh tokens issued by Shopify, which we need to act for the store. These are credentials, are stored on our servers, and are never displayed publicly.
Merchant-created content and configuration
We handle the content and settings a merchant creates in the App, including:
- block layouts and their text, colors, fonts, icons, links, image links and styling;
- scheduling settings (dates, days and times), page-targeting settings (such as page type, products or collections), and translations;
- the template a block was created from, and setup-guide progress; and
- optional diagnostic settings that a merchant may switch on temporarily to help troubleshoot.
This content describes promotions and store preferences. Please do not enter personal information about individuals into blocks or other App fields. Block content is published to the merchant's online store and is visible to anyone who can view that store.
Publishing to the merchant's store
To display blocks on a store, the App saves a published copy of the merchant's block content, together with the merchant's current plan and enabled features, in the merchant's own Shopify store data. This copy is readable by the store's storefront so that blocks can be shown to visitors.
Subscription information
Paid plans are billed through Shopify. We receive and keep the plan selected, subscription status and billing-period dates so that we can provide the correct features. We do not receive or store payment-card numbers.
Support communications
If you contact us, we receive your contact details, your message and any information you choose to share. Please do not send passwords, access credentials, payment details or unrelated personal information.
Technical and security information
We may keep operational records such as request metadata, IP addresses, timestamps, error information, background-job records and security events needed to run, secure and troubleshoot the App. These records may include a store's Shopify domain.
3. Visitors to a merchant's store
Cookies and Local Storage
Flexi Blocks uses certain cookies and browser local storage on visitors’ devices to support specific functionality, such as remembering when a visitor dismisses a block or maintaining countdown timer settings. These technologies are used only when the relevant feature is enabled by the merchant.
The information stored is limited to what is necessary for these features to function. It is not used to identify individuals, for advertising, or for tracking visitor behavior. Flexi Blocks does not receive visitor analytics, clicks, impressions, or behavioral data, and the storefront code does not send visitor information to our servers.
If a block includes a copy-code feature, the code is copied to the visitor’s clipboard only when they click the copy button.
Merchants are responsible for determining whether their store requires a cookie or consent notice for these technologies.
Language and External Resources
Where translations are provided by the merchant, the storefront displays text in the language appropriate to the visitor’s browsing experience. This is handled by the visitor’s browser and Shopify, and Flexi Blocks does not receive or store the visitor’s language information.
If a merchant chooses to use Google Fonts or other externally hosted fonts, assets, or images, the visitor’s browser may connect directly to those third-party providers. These providers may receive information such as the visitor’s IP address and device or request information, subject to their own privacy practices. Merchants are responsible for the external resources they choose and for any notices or consent requirements that may apply.
The merchant’s store, Shopify, and other installed apps or services may independently collect information in accordance with their own privacy policies. Flexi Blocks does not control these practices.
4. Information we do not collect
The App does not request access to customer or order data, and we do not maintain a database of a merchant's customers, orders or store visitors. The permissions the App requests relate to the following areas only:
- reading products and product listings, so merchants can link to products;
- reading the store's locales (languages), so merchants can localize blocks;
- reading the store's themes, so the App can link merchants to the theme editor;
- reading and writing the app-owned custom data and its definitions that Shopify provides for publishing blocks to the store; and
- writing content, which Shopify groups with online-store content permissions.
5. How we use information
We use information to:
- provide, maintain and improve the App and its features;
- authenticate users and apply the correct permissions and plan;
- save, synchronize and publish the merchant's blocks and settings;
- administer subscriptions and keep plan status accurate, including through periodic automated checks with Shopify;
- respond to support requests and communicate about the App;
- diagnose problems and keep the App secure, and prevent fraud and abuse; and
- comply with legal obligations and enforce our terms.
We do not sell personal information, share it for cross-context behavioral advertising, or use it to build advertising profiles.
6. Who receives information
We share information only as needed to operate the App, with:
- Shopify, the platform through which the App is installed, billed and connected to the merchant's store;
- service providers that help us with hosting, databases, background-job processing, infrastructure, security, communications and support, who may process information only on our instructions and under confidentiality and security obligations;
- professional advisers, and authorities or other parties where required by law or necessary to protect rights, safety or security; and
- a successor in a merger, acquisition, financing or similar transaction, subject to appropriate protections.
While a merchant uses the App's editor, the merchant's browser may request fonts from Google Fonts to preview a chosen font. The request does not include store content, but the provider can see the browser's IP address.
7. Retention and Deletion
We retain information for as long as necessary to provide the App, resolve disputes, meet legal obligations, and protect the service.
Important: Treat uninstalling the app as permanent deletion of your App data. Your records may be permanently deleted, and recovery is not guaranteed. Some data may be deleted shortly after uninstalling, while the remaining data is deleted when Shopify sends us its data erasure request, which typically arrives about 48 hours after uninstalling. Do not rely on any delay in this process to recover your data.
• Uninstalling: When a merchant uninstalls Flexi Blocks, the App loses access to the store. We automatically delete authentication sessions, including access tokens and staff details, and subscription records shortly afterward. Shopify may also remove content published by the App as part of its uninstall process. Shopify typically sends a shop erasure request about 48 hours after uninstalling. Once we receive this request, we permanently delete the store’s remaining App data from our systems, including block layouts and settings, shop settings, setup guide progress, and any remaining session and subscription records. We may retain limited information where necessary to meet legal obligations, address security concerns, or resolve disputes.
• Reinstalling: If you reinstall the App, you should expect to start from scratch. Previously saved data or settings may occasionally remain available if the erasure process has not yet been completed, but this is not guaranteed.
• Content in the merchant’s store: Content stored directly in the merchant’s Shopify store, including theme settings and content linked from blocks, may remain after uninstalling. Merchants are responsible for removing this content if they no longer need it.
• Backups: Deleted information may remain in backups until it expires under our regular backup retention cycle. Backups are maintained for disaster recovery and cannot be relied upon to restore data after uninstalling.
• Support records, logs, and job records: These are retained only for as long as reasonably necessary for their intended purposes. Completed background job records are automatically deleted according to a short retention cycle.
8. Privacy requests from Shopify
We process Shopify's mandatory privacy requests for customer data requests, customer data erasure and shop data erasure. Because we do not hold customer, order or visitor records, we typically have no customer personal data to provide or erase. We respond to these requests based on the information we actually hold.
9. Your rights and choices
Depending on where you live, you may have the right to access, correct or delete your personal information, restrict or object to its processing, receive a portable copy, withdraw consent, and complain to a data-protection authority.
To make a request, contact [email protected] with your store domain (if relevant) and a description of your request. We may need to verify your identity. We will never ask for your password.
If your request concerns a store's customers or visitors, an order or a purchase, please contact that merchant first. We will assist the merchant with requests about information we process on its behalf.
Visitors can delete the App's cookie and local-storage entries at any time through their browser settings.
10. Security
We use technical and organizational measures appropriate to the information we handle, including access controls, authenticated access to the App, encryption where appropriate, and monitoring. No system can be guaranteed completely secure. To report a security issue, contact [email protected]. Do not include passwords, credentials or unnecessary personal information in your report.
11. Changes
We may update this policy as the App, our practices or legal requirements change. We will update the effective date above and, where required, give additional notice.
12. Contact
Zerqith.com [email protected]
For security issues: [email protected]