Kea Labs Website and Search Privacy Policy

Website analytics and privacy choices

kealabs.com does not start optional website analytics until you make a choice in the privacy banner. If you accept analytics, we use PostHog Cloud EU and Google Analytics 4 to measure page visits and product interactions such as navigation, calls to action, demo launches, and form stages. Analytics events use opaque session and event identifiers. We do not send lead-form field values, raw search terms, provider click IDs, or full URLs with query strings in our custom analytics events.

After analytics consent, the website may store an opaque session record in session storage and normalized first- and last-touch attribution fields such as source, medium, campaign, and content. Attribution is kept for up to 30 days. Raw incoming provider identifiers and unknown URL parameters are not part of this stored attribution.

Masked session replay

Session replay is a separate optional choice in privacy preferences and is never enabled by the “Accept analytics” button alone. When separately enabled, replay is sampled for up to 10% of consented sessions lasting at least ten seconds. Input values, page text, and element attributes are masked; cross-origin frames and console logs are not recorded.

Support chat and lead forms

The website support chat is provided through Tawk. It remains available without website analytics consent. After you accept analytics, the chat may receive an opaque website analytics session ID so that a support conversation can be connected to the same website session. It does not receive the website's acquisition alias or advertising-provider click identifiers from this integration.

When you submit a demo or contact form, the information you enter is sent to the Kea Labs lead service for responding to your request. Form values are not copied into PostHog events. With analytics consent, the lead request may include normalized attribution and an allowlisted first-party analytics context; without consent those fields are omitted.

Retention and withdrawal

The website remembers a consent choice for up to 180 days. Normalized attribution is kept in your browser for up to 30 days. Governed raw website analytics may be retained for up to 395 days, masked replay for up to 30 days, and short-lived data-quality diagnostics for up to 30 days.

You can change or withdraw your consent at any time through “Cookie / privacy settings” in the website footer. Withdrawal stops optional analytics and replay, clears the website analytics session and attribution stored in your browser, clears PostHog browser identity and persistence, and removes the active analytics-session link from support chat. Information already received by a service is handled under the retention periods above and applicable deletion obligations.

Product application privacy notice

The following notice applies separately when a merchant installs or uses the Kea Labs Search application in connection with a Shopify-supported store. Kea Labs Search (the “App”) provides in-store search (the “Service”) to merchants who use Shopify to power their stores.

Personal Information the App Collects

When you install the App, we are automatically able to access certain types of information from your Shopify account:

• View general shop information.
• View store products and collections. This permission is required to synchronise product and collection data between Shopify and the App for search features.
• View store orders. This is required for analytics.
• View Store theme settings.
• View and update script tags on storefront. This permission allows us to insert search script on the store page to enable search functionality.

Additionally, we collect the following types of personal information from you and/or your customers once you have installed the App: order information, customer ID, customer email, search queries, and product clicks. This information is used to operate and improve search relevance.

We collect personal information directly from the relevant individual, through your Shopify account, or using the following technologies:

• “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
• “Log files” track actions occurring on the Site, and collect data including your, browser type and date/time stamps.

How Do We Use Your Personal Information?

We use the personal information we collect from you in order to provide the Service and to operate the App. Additionally, we use this personal information to: Communicate with you; Optimize or improve the App; and Provide you with information or advertising relating to our products or services.

Website Analytics and Advertising Measurement

On kealabs.com, optional analytics is activated only after you accept analytics in our privacy preferences. We use PostHog EU and Google Analytics 4 to understand page and product interactions. We use Microsoft Advertising Universal Event Tracking (UET) and Google Ads conversion measurement to determine whether an ad led to a site visit or outbound Marketplace action. These analytics and advertising tags are not loaded before analytics consent, Microsoft Clarity and Google enhanced conversions are not enabled, and withdrawing consent stops further custom events.

Our custom advertising events contain bounded event names such as demo launch and Marketplace intent. We do not include form input values, raw search terms, or provider click identifiers in PostHog business events. A Marketplace outbound action is an intent proxy, not evidence of a purchase.

You can change or withdraw this optional consent at any time using “Cookie / privacy settings” in the website footer.

Kea Labs may contact you by email or other means. For example, Kea Labs may send you promotional emails relating to Kea Labs or other third parties Kea Labs feels you would be interested in, or communicate with you about your use of the Kea Labs website. Kea Labs may also use technology to alert us via a confirmation email when you open an email from us. You can modify your email notification preferences by clicking the appropriate link included in the footer of email notifications. If you do not want to receive email from Kea Labs, please opt out of receiving emails at the bottom of any Kea Labs emails.

Sharing Your Personal Information

We do not and will never share, disclose, sell, rent, or otherwise provide personal information to other third parties or companies (other than to specific Shopify merchants you are interacting with, or to third-party apps or service providers being used by the merchants you are interacting with) for the marketing of their own products or services.

Still, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, a search warrant or other lawful requests for information we receive, or to otherwise protect our rights.

Your Rights

If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.

Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information may be transferred outside of Europe, including to Canada and the United States.

We receive the store data information from Shopify platform through Shopify API and Shopify Hooks.

Data Retention

Our retention practices are: for the store owner, data is stored in the App database and is stored as long as the store owner continues using the App; when the store owner uninstalls the App, the data is deleted within the 12 months.

For order hook, all personal data is deleted as soon as the app receives the order hooks; no personal data is retained for this kind of information.

For application logs, data is collected for application analyzing, monitoring and security purposes, and is kept for 12 months.

Tracking information from a Store page is stored anonymously and kept for 12 months.

Changes

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at privacy@kealabs.com or by mail using the details provided below:

Kea Labs OÜ (Company registration no. 14697238)
Narva mnt 5, 10117 Tallinn, Estonia