Privacy policy

Hearsay is a BigCommerce app that records how a customer heard about a store. This page describes what it holds. The full technical basis is in the repository as docs/data-handling.md, and this summary tracks it.

What we store about your customers

One row per answered order: which channel the order came through, the option chosen or the free text typed, and when it was submitted. No name, no email address, no postal address. The order id is the only link back to a person, and resolving it needs your own control panel.

Alongside that, a snapshot per order we have seen: channel, total, currency, status, and whether the question was shown. It is what the revenue report and the response rate are counted from. It is not a mirror of your orders and holds nothing about the buyer.

If you turn on asking each customer only once, we keep a reference per customer: either BigCommerce’s own customer id, or a keyed hash of the billing email. The hash cannot be reversed without a secret held by the worker, and the address itself is never stored.

What we store about you

Your store hash and API token, the scopes you granted, your store’s language, country, currency and timezone, your app settings and survey, your subscription record, and the BigCommerce user ids and email addresses of people who can open the app.

We hold no payment card details at any point. Those stay with BigCommerce.

Why

Each item is there to authenticate you, bill you, or answer the question the app exists to answer. Anything that could not be justified on those grounds is not collected.

How long

Until you uninstall. Removing the app deletes the store’s data. The answer mirrored onto each order as a metafield is yours and stays on the order, because it is written into your store rather than held in ours.

Who else sees it

BigCommerce, whose API the app reads and writes through, and Cloudflare, which runs the worker and the database. Transactional email is sent through Cloudflare. Nothing is sold, and nothing is shared for advertising.

Contact

hearsay@pouchapps.com for access, export or deletion requests.