Privacy policy

Last updated 3 November 2026.

Who we are

Funelyze (“we”) provides software that lets businesses (“customers”) build and embed quiz funnels on their websites. This policy covers both our customers and the people who take their quizzes (“visitors”).

Funelyze is operated by Matas Vosylius, a sole trader registered in Lithuania (individual activity certificate No. 1363850). The controller is Matas Vosylius, Vilnius, Lithuania, for customer data and for this website. Contact: privacy@funelyze.com.

What we collect from customers

• Account details from sign-in (name, email) via our authentication provider, Clerk.
• The content you create: quizzes, results, uploaded images, website details you ask us to analyse.
• Billing details handled by Stripe. We never see or store card numbers.
• Product usage: pages visited in the dashboard (Vercel Analytics, and Google Analytics if you accept cookies), and a record of key actions in your account, such as the days you open the app, publishing or placing a quiz, and changing your plan, kept for 180 days so we can support you and fix problems.

What we collect from visitors

• Answers to the quiz and, if they submit the lead step, the contact details they type in.
• Technical data needed to run the quiz: a hashed IP address for rate limiting, the page the quiz was embedded on, browser type and UTM parameters.
• No cookies are set on visitors and no cross-site tracking takes place.

The customer who owns the quiz is the data controller for visitor data; we process it on their behalf and under their instructions.

Cookies on our own website

On funelyze.com and in the dashboard we use Google Analytics to see which pages are visited and where visits come from, and we may use ad pixels from Google, Meta and TikTok to measure our own campaigns. None of them sets a cookie until you click Accept on the cookie banner; before that, Google receives only cookieless pings (Google Consent Mode). Your choice is kept for a year in a first-party cookie called fz_consent; clear it and the banner asks again. None of this runs on hosted quizzes or inside the Shopify admin.

How we use it

To run the service, show customers their results and leads, send the emails they enabled (lead alerts, result copies), prevent abuse, and improve the product. We don't sell personal data.

If you installed our Shopify app

Installing grants us an offline Admin API token for your store, held in our database (encrypted at rest by our host) and used only for the three scopes you approved. With read_products we read your active products, variants and prices to build quiz results; we store only what a result shows (title, image, price and variant id) inside your quiz. With write_customers we create or update a Shopify customer for each quiz lead, tagged with the quiz and the matched result, so your own email and segmentation tools can use it. We raise email marketing consent only when the shopper ticked the box on your quiz, and we never lower consent that already exists. With read_orders we receive new orders and keep only those whose cart the quiz filled, recognised by the quiz's own cart attribute: we store the order number, total and currency on that quiz submission to show you the revenue your quiz brings in, and nothing about the buyer.

We do not use store or shopper data to train models or for any purpose beyond running your quizzes. Uninstalling revokes the token. We honour Shopify's privacy webhooks: customers/redact erases the quiz submissions belonging to that shopper, shop/redact erases your whole workspace, and customers/data_request sends the data we hold for that shopper to your notification email so you can answer the request.

Security

How we protect this data, what we do when something goes wrong and how to report a vulnerability are set out on our security page.

Sub-processors

Vercel (hosting, image storage), Neon (database), Clerk (authentication), Stripe (payments), Resend (email), Anthropic (AI drafting of quiz copy from your website text; visitor answers are never sent), Google (AI images drawn from the quiz text you write, with visitor answers never sent; Google Analytics on our own website), Sentry (error monitoring; error reports carry account and store ids, never quiz answers or contact details).

Retention and deletion

Customers can delete any quiz or lead from the dashboard, which removes the visitor data that came with it. To delete a whole account, email us and we'll erase it. Visitors can ask the quiz owner, or us at privacy@funelyze.com, to access or erase their data.

Your rights

Depending on where you live you may have rights to access, correct, export or erase personal data, or to object to processing. Email us and we'll respond within 30 days.

Changes

We'll post updates here and notify customers by email for material changes.