Overview
Phoenix is built to collect only what your quiz needs and to make privacy requests easy to honor. Here is a quick overview of where shopper data lives and how it is handled under GDPR and CCPA.
Where your data is stored
All quiz data is stored in a database on Octane AI's AWS infrastructure in the US-West-2 (Oregon) region. It is encrypted at rest, and encrypted in transit between the shopper and Octane AI.
What Phoenix collects
No IP addresses. We never store a shopper's IP address. Location is kept at country and state level only.
Anonymous by default. A shopper is only identified if they choose to share an email or phone number in the quiz.
Kept to your store. Each store's data stays with that store. The same person is never linked across merchants.
Cookie consent respected. Phoenix follows the shopper's choice in your store's consent banner. Shoppers who decline still get the full quiz, but receive no cookies from us and are never tracked across visits.
Shopper rights
Right to be forgotten. When a shopper asks to be erased, through Shopify's privacy requests or directly from your dashboard, their identity, contact details, personal answers, and uploaded photos are permanently removed. Only anonymous quiz behavior remains for your store's analytics.
Right of access. You can pull a shopper's full profile for a data request, or reset your store's analytics entirely, without contacting us.