1. Introduction
Chapters ("we", "our", or "us") is a Shopify application developed by Pixipace that enables merchants to create and sell online courses through their Shopify stores. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application.
By installing and using Chapters, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Shop Information
When you install Chapters, we collect:
- Shop domain and name
- Shop owner email address
- Shopify access tokens (securely stored)
2.2 Course Data
We store course content you create:
- Course titles, descriptions, and settings
- Chapter and lesson information
- Video metadata (hosted on Bunny.net)
- Product associations
2.3 Customer Data
When customers purchase courses, we collect:
- Shopify Customer ID (not personal details)
- Order ID for enrollment verification
- Course progress and completion data
- Watch time statistics
2.4 Zoom Data (when connected)
If a merchant connects Zoom to host live class lessons, we collect:
- OAuth access and refresh tokens (used only to create/update/delete meetings on their account)
- Connected Zoom user's display name and email (for Settings confirmation)
- Meeting metadata for meetings we create — meeting ID, scheduled time, duration, join URL
See section 4.3 for full details on Zoom integration data handling.
3. How We Use Your Information
We use the collected information to:
- Provide and maintain the Chapters application
- Process course enrollments automatically when orders are paid
- Track student progress through courses
- Display analytics and reports to shop owners
- Provide customer support
- Improve our application and services
4. Third-Party Services
We use the following third-party services:
4.1 Shopify
Chapters operates within the Shopify platform. Your use is also governed by Shopify's Privacy Policy.
4.2 Bunny.net
Video content is hosted on Bunny.net Stream. Videos are stored securely and delivered via their CDN. See Bunny.net Privacy Policy.
4.3 Zoom
Merchants may connect their Zoom account to Chapters to schedule and host live class meetings on their own Zoom account. When a merchant connects Zoom via OAuth, we receive and store the following on the merchant's behalf, encrypted at rest:
- OAuth access and refresh tokens (used solely to create, update, and delete meetings on the connected account)
- The connected Zoom user's display name and email address (shown back to the merchant in Settings as confirmation of which account is linked)
- Meeting metadata for meetings we create on the merchant's behalf — meeting ID, scheduled start time, duration, and join URL
We do not store Zoom passwords, meeting recordings, attendee lists, or in-meeting content. Merchants can disconnect Zoom at any time from the Settings page; disconnection clears all stored Zoom tokens from our database. See Zoom's Privacy Policy.
4.4 Database Hosting
Application data is stored in secure PostgreSQL databases hosted on industry-standard cloud infrastructure with encryption at rest and in transit.
5. Data Retention
We retain your data as follows:
- Active Use: Data is retained while the app is installed.
- After Uninstall: Shop data is deleted within 48 hours of app uninstallation.
- Customer Requests: Customer data is deleted upon GDPR/CCPA requests via Shopify.
- Zoom Tokens: Cleared immediately when a merchant disconnects Zoom from Settings, or on app uninstall.
6. Data Security
We implement appropriate security measures including:
- HTTPS encryption for all data transmission
- Encrypted database storage
- Secure token-based authentication
- Regular security audits
- Access controls and monitoring
7. Your Rights (GDPR/CCPA)
You have the right to:
- Access: Request a copy of your data.
- Rectification: Correct inaccurate data.
- Erasure: Request deletion of your data.
- Portability: Receive your data in a portable format.
- Object: Object to certain processing activities.
To exercise these rights, contact us at chapters@pixipace.com or submit a request through Shopify's customer data request system.
8. Children's Privacy
Our service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
10. Contact Us
If you have questions about this Privacy Policy, please contact us:
- Company: Pixipace
- Email: chapters@pixipace.com
- Website: www.pixipace.com