Overview
woohoo Labs, Inc. (“woohoo”, “we”, “us” or “our”) builds popup and gamification tools for ecommerce stores. This Privacy Policy applies to getwoohoo.com, the woohoo application, and related services (together, the “Service”).
It covers three kinds of people: visitors to our website, merchants who create a woohoo account, and shoppers who interact with a woohoo popup on a merchant’s store. Where our role differs between these groups, we say so — see woohoo as a data processor.
Information we collect
Information you provide. When you create an account or contact us, we collect your name, email address, company name, password, and any details you include in support requests. Billing details are collected and processed by our payment provider; we do not store full card numbers.
Information collected automatically. When you use the Service we collect device and browser type, IP address, pages viewed, referring URLs, and similar usage data through cookies and comparable technologies.
Information from your store platform. When you connect a platform such as Shopify or WooCommerce, we receive your store name, domain, plan, and the order and conversion metrics needed to power analytics and benchmarking features.
Information collected on behalf of merchants. When a shopper submits a woohoo popup — for example, an email address to claim a discount — we collect that information and pass it to the merchant. For this data woohoo acts as a processor; the merchant is the controller.
How we use information
- To provide, operate, and maintain the Service, and to authenticate accounts.
- To process payments and manage subscriptions.
- To provide customer support and respond to your requests.
- To analyze usage, troubleshoot, and improve our products.
- To detect, prevent, and address fraud, abuse, and security issues.
- To send service and transactional messages about your account.
- To send marketing communications, where permitted — you can opt out at any time.
- To comply with legal obligations and enforce our agreements.
Legal bases for processing
Where the GDPR or similar laws apply, we rely on the following legal bases: performance of a contract with you; our legitimate interests in operating and improving the Service; your consent (which you may withdraw at any time); and compliance with legal obligations.
Data retention
We retain personal information for as long as your account is active and as needed to provide the Service, then for the period required to meet legal, accounting, or reporting obligations. Information collected on behalf of a merchant is retained according to that merchant’s instructions.
Security
We protect personal information with encryption in transit and at rest, access controls, network protections, and regular review of our practices. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
International data transfers
woohoo operates in the United States and may process information in other countries. Where we transfer personal information across borders, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.
woohoo as a data processor
For information collected through popups displayed on a merchant’s store, the merchant is the data controller and woohoo is the processor. We process that information only on the merchant’s documented instructions and under our Data Processing Agreement. If you are a shopper and want to access or delete information you submitted to a store, please contact that store directly; we will assist the merchant in responding.
Your privacy rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. California residents have additional rights under the CCPA/CPRA, including the right to know, delete, and correct, and the right not to be discriminated against for exercising those rights.
To exercise any of these rights, email privacy@getwoohoo.com. We will verify your request and respond within the time required by applicable law. You may also have the right to lodge a complaint with your local data protection authority.
Children’s privacy
The Service is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. When we do, we will revise the effective date above, and for material changes we will provide additional notice, such as an email or an in-app message.
Contact us
Questions about this policy or your personal information? Reach our privacy team atprivacy@getwoohoo.com, or write to woohoo Labs, Inc., Attn: Privacy.