Privacy Policy

Last updated: October 2, 2026

This Privacy Policy explains what information zappmeup collects, how we use it, and the choices you have. It applies both to Customers who run a zappmeup dashboard account and to Subscribers (the people who install a Customer's app and receive notifications through it).

1. Information we collect

From Customers (dashboard accounts): your email address and username, the websites you connect (URL, name, icon, and brand colors), your notification history, and billing information handled by our payment processor.

If you connect a Squarespace site: when you approve the connection on Squarespace, we receive that site's basic details (its Squarespace site ID, name, and web address) and the access tokens Squarespace issues to zappmeup, which we use only while making the connection and don't keep. Squarespace's approval screen shows the permission we ask for. We use the connection to confirm the site is yours and to find out if you remove our extension — we don't read your store's orders, customers, or other store data.

From Subscribers (people who install a Customer's app): a push subscription record (a device endpoint and encryption keys) issued by your browser so notifications can reach you. Subscribing is anonymous — we don't collect your name, email address, or any information beyond what's needed to deliver and track notifications.

Automatically: basic technical data like IP address and browser type, collected as part of normal web server operation and used only for security and troubleshooting.

2. How we use information

To operate the dashboard and let Customers manage their connected websites and notifications;
To deliver push notifications to Subscribers via their browser's push service;
To process billing for paid plans;
To communicate service updates, security notices, or respond to support requests; and
To keep the service secure and prevent abuse.

We don't sell personal information, and we don't use Subscriber data for advertising.

3. How push notifications work

When a Subscriber opts in to notifications, their browser generates a push subscription (an endpoint URL and encryption keys) through a browser-vendor push service — for example Google's, Apple's, or Mozilla's infrastructure, depending on the Subscriber's browser. We store that subscription and use it only to deliver the notifications a Customer sends through zappmeup. We don't control, and aren't responsible for, how those browser vendors handle data in transit to a Subscriber's device.

4. Sharing information

We share information only as needed to run the service:

With browser push services (as described above), to deliver notifications;
With our payment processor, to handle billing for paid plans;
With hosting and infrastructure providers, who process data on our behalf under contract; and
When required by law, or to protect the rights, safety, or property of zappmeup, our Customers, or others.

We don't share Subscriber data with the Customer's other tools or with unrelated third parties.

5. Data retention

We keep account, website, and notification data for as long as the related account is active, plus a reasonable period afterward for legal and operational purposes. Deleting a connected website removes its notification history and subscriber records. Disconnecting a Squarespace site in zappmeup, or removing our extension in Squarespace, deletes the Squarespace link we stored for it (the site's app keeps working). A Subscriber can stop receiving notifications at any time by revoking notification permission in their browser or uninstalling the app.

6. Your choices and rights

Customers can access, correct, or delete their account data from the dashboard, or by contacting us. A Subscriber's only data is their push subscription, which they can remove at any time by revoking notification permission in their browser or uninstalling the app, or by contacting us directly. Depending on where you live, you may have additional rights under laws like the GDPR or CCPA, including the right to request a copy of your data or its deletion — contact us to exercise them.

7. Cookies and local storage

The dashboard uses a session cookie to keep Customers signed in. The hosted app page uses a small amount of browser local storage (not cookies) for on-device conveniences — such as remembering that the app has been installed — scoped to that page only, with no Subscriber account or login involved.

8. Children's privacy

zappmeup isn't directed at children under 13, and we don't knowingly collect information from them. If you believe a child has provided us information, contact us and we'll remove it.

9. Security

We use industry-standard measures — including password hashing and encrypted connections — to protect the information we hold, but no system is perfectly secure, and we can't guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll post the updated policy here with a new "Last updated" date.

11. Contact

Questions about this policy, or want to exercise a data right? Reach us at support@zappmeup.com.