Privacy Policy

Summary

The app does not store your visitors' email addresses, and it does not send them or any other form data to GRAMSHIFT or to anyone else. When a visitor submits a form you protect, the app turns the email address into a one-way hash mixed with a random value unique to your site, and keeps only that hash in a private collection on your own Wix site. The app's code runs on Wix's own hosting for Wix apps. GRAMSHIFT runs no server, database or other cloud service for this app.

What the app processes

• Form submissions to protected forms. When a visitor submits a form you chose to protect, Wix sends the submission to the app's check before it is saved. Afterwards Wix tells the app that the submission was saved (or, for a form that takes payment, that the payment went through or was cancelled), and the app reads the same email field once more to mark the address as used, or to free it. The app uses only the value of the email field you picked. It does not store or log the email address or any other value of the submission.
• The visitor ID Wix sends with a submission. Wix tells the app which visitor sent the submission (an anonymous Wix visitor ID, or a member ID). While the submission is being saved, the app keeps a salted one-way hash of that ID, only to tell the same visitor trying again from a second person using the same address. The hash is cleared once the submission is saved; for a submission that is never saved, it stays in that row until the row is removed (see Retention and deletion).
• The email address, briefly, in memory. The address is trimmed and lowercased, then hashed with SHA-256 together with your site's random value and the form ID. For a Gmail address the app also hashes its Gmail form (without dots, a +tag or googlemail.com) the same way, so the Gmail rule can match it. Only the resulting hashes are kept.
• Your forms list. The dashboard page reads the names and fields of your site's forms so you can choose which forms to protect and which field holds the email address.
• Your app plan. The app asks Wix whether the site is on the free or a paid plan, to decide how many forms it protects.
• An email you type in the dashboard. When you use Remove entry for one person, the address you type is hashed the same way to find and remove the matching row (with the Gmail rule on, every row of the same Gmail mailbox). It is not stored.

What the app stores, and where

The app keeps two collections in your site's CMS (Wix Data). They are set so that only the app and you, as the site owner, can read or change them; site visitors cannot.

The address cannot be read back from a hash. A hash can only be matched by hashing a known address again with the same site value and form ID, which is what Remove entry does. Because the random value is different on every site, the same address produces different hashes on different sites.

Visitors' browsers and your dashboard connect to Wix over HTTPS. The app's check runs inside Wix, and the collections are stored by Wix as part of your site.

What the app does not do

• It sends nothing to GRAMSHIFT servers and makes no requests to services outside Wix.
• It uses no cookies, no analytics, no advertising and no third-party services.
• It does not read submissions to forms you have not protected beyond seeing that they are not protected, and it never changes your submissions.
• It does not identify visitors, build profiles or use the data for any other purpose.

Who is responsible for visitor data

You, the site owner, decide to collect the email addresses on your forms and are the controller of your visitors' data. The app processes the email address only to carry out the check you set up, on your behalf and on your site. We suggest your own privacy policy mention that form entries are checked so that each email address can submit only once. Visitors who want their entry removed should contact the site owner, who can remove it with Remove entry. GRAMSHIFT cannot identify a visitor from a hash and does not keep a copy of your collections.

Information GRAMSHIFT receives from Wix

When a site installs the app or buys a plan, Wix shares information about the installation and the subscription with app providers, and may share the site owner's contact details. GRAMSHIFT uses this only to manage plans, answer support requests and meet legal obligations, and does not sell it. Payments are processed by Wix; GRAMSHIFT never receives card details.

Support requests

If you email us, we receive what you choose to send (for example your email address, your message and any screenshots). We use it only to answer you. Please do not send your visitors' email addresses or other personal data unless it is needed to solve the problem. Email to contact@gramshift.com is forwarded by our email forwarding provider (ImprovMX) to a mailbox hosted by Google (Gmail), so those providers process support emails on our behalf.

Legal basis

For visitor email addresses, the app acts on the site owner's instructions; the site owner's own legal basis applies. For information received from Wix and for support emails, GRAMSHIFT is the controller and relies on its legitimate interest in managing plans and answering requests, and on legal obligations (for example tax records). GRAMSHIFT is based in Japan, so this information is processed in Japan and by the providers named above.

Retention and deletion

• One person: in the app's dashboard, under Entries, choose the form, type the email address and press Remove entry.
• A whole form: press Clear entries on that form and confirm with Remove all.
• Time period: when you choose a period (for example 30 days), an entry older than the period no longer blocks that address. The row stays until the address submits again, you remove it, or you clear the form.
• Checked but never saved: if a submission passes the check but Wix does not save it, its row is kept as not saved. It is not counted, does not use the address up, and holds off other visitors for at most two minutes. It stays until the address submits again, you remove it, or you clear the form; a cancelled payment removes it at once.
• Removing the app: the collections belong to your site. If they are still in your site's CMS after you remove the app, you can delete them there (they are shown as One Submission Per Email: Ledger and One Submission Per Email: Settings). GRAMSHIFT keeps no copy, so nothing else needs to be deleted.
• Support emails are kept only as long as needed to handle the request and meet legal obligations; you can ask us to delete them. Information from Wix about installations and plans is kept while the app is installed and for up to 7 years afterwards for accounting and tax records.

Your rights

You can ask us to access, correct or delete personal information we hold about you, or object to its use, by emailing contact@gramshift.com. If you are in the EEA or the UK, you can also complain to your local data protection authority.

Changes

If the app ever starts to store more data or send data anywhere else, this policy will be updated before that change is released, and the date above will change.

Contact

GRAMSHIFT · contact@gramshift.com · 1-10-8 Dogenzaka, Shibuya Dogenzaka Tokyu Bldg 2F-C, Shibuya-ku, Tokyo 150-0043, Japan

プライバシーポリシー（日本語）