Plugin: Zanopy: Landing Page Creator
Last Updated: April 30, 2026
Effective Date: 30 April 2026 - Version 1.0
This Privacy Policy applies specifically to the Zanopy WooCommerce Plugin ("Plugin"), which connects a merchant's WooCommerce store to Zanopy services.
The Plugin enables features such as landing page generation, store analytics, and merchant-configured automation workflows.
Zanopy acts as a data processor on behalf of the merchant. The merchant (store owner) remains the data controller and is solely responsible for collecting, managing, and ensuring lawful use of customer data in accordance with applicable privacy laws.
This Plugin Policy should be read alongside the main Zanopy Privacy Policy, which governs general website use. Merchants who require a Data Processing Agreement (DPA) in accordance with GDPR Article 28 may request one at https://zanopy.ai/contact.php. By connecting the Plugin, the merchant agrees that Zanopy acts solely as a data processor under the merchant's documented instructions.
The Plugin does not provide consent management tools. Merchants are responsible for implementing appropriate consent mechanisms within their store.
This Policy is designed to align with major global data protection frameworks, including the General Data Protection Regulation (GDPR), UK GDPR, and the California Consumer Privacy Act (CCPA/CPRA), where applicable.
When a merchant connects their store, the Plugin may securely transmit the following data to Zanopy:
Customer information is processed strictly to support merchant-configured workflows and plugin functionality. Zanopy does not independently initiate communication with customers.
Legal Basis for Processing Zanopy processes store and order data on the basis of contractual necessity - to deliver the Plugin services the merchant has subscribed to. Customer personal data is processed on the basis of the merchant's own lawful grounds (such as consent or contractual necessity with the end customer). Zanopy does not rely on an independent legal basis to process customer data and acts solely on documented merchant instructions. The Plugin itself does not place cookies on the merchant's storefront. However, the analytics and heatmap script used on Zanopy-generated landing pages may use tracking technologies that are subject to user consent. Analytics data is derived exclusively from server-side store data transmitted by the merchant.
Visitor Behaviour Data (Landing Pages only): When a merchant publishes a Zanopy-generated landing page, the page may include an analytics and heatmap script that collects the following from page visitors: IP address (anonymised after processing), browser type and version, device type and screen resolution, pages visited and time spent, click positions and scroll depth, and conversion events (e.g. form submissions, button clicks). This data is collected to provide the merchant with analytics and heatmap reports. It is processed on behalf of the merchant and is not used by Zanopy for any independent purpose.
Visitor behaviour data collected via the analytics and heatmap script is processed on the basis of consent. The merchant is responsible for implementing a compliant cookie consent mechanism on their landing page before the Zanopy analytics script activates. Zanopy provides a consent-aware script that will not fire until visitor consent is obtained. Where the merchant fails to implement consent, the merchant bears sole legal responsibility for any resulting non-compliance.
Merchants are responsible for:
Zanopy processes data only on documented instructions from the merchant via Plugin configuration. Zanopy shall not be liable for the merchant's failure to obtain valid consent, provide required notices, or otherwise comply with applicable data protection and privacy laws.
Zanopy uses transmitted data solely to provide Plugin functionality, including:
All automation messages are configured and triggered by the merchant.
Zanopy does not:
The Plugin connects securely to Zanopy infrastructure at:
Data transmission occurs only after explicit merchant connection and authorization. If the Plugin is not connected, no store or customer data is transmitted.
Visitor behaviour data collected by the analytics and heatmap script is transmitted directly from the visitor's browser to Zanopy's analytics infrastructure at:
https://zanopy.ai/reporting_page.php
This transmission occurs only on landing pages where the merchant has enabled the analytics feature and where visitor consent has been obtained.
Zanopy takes commercially reasonable measures to protect data, consistent with the principles outlined in its main Privacy Policy.
However, no method of transmission or storage is completely secure, and absolute security cannot be guaranteed.
Zanopy may engage trusted third-party service providers ("sub-processors") to support the operation of the Plugin, including cloud hosting, infrastructure, and data storage services. All sub-processors are contractually bound by data protection obligations consistent with this Policy and applicable law.
A current list of sub-processors may be provided upon request. Zanopy ensures that any sub-processor processes personal data only on documented instructions and implements appropriate technical and organisational measures to protect such data.
Zanopy may process limited technical and operational metadata (e.g., usage logs, error reports) to:
Customer-identifiable information is not used for advertising, profiling, or independent analytics.
If the Plugin is uninstalled:
Merchants may:
Customer Data Subject Rights Where Zanopy processes personal data about end customers on behalf of a merchant, those customers may have rights under applicable law (including GDPR and UK GDPR) — such as the right to access, rectification, erasure, restriction of processing, and data portability. These requests should be directed to the merchant in the first instance, as the data controller. Zanopy will provide reasonable assistance to merchants in fulfilling such requests.
CCPA Notice Zanopy does not sell personal data as defined under the California Consumer Privacy Act (CCPA). No customer or merchant data is sold, rented, or traded to third parties for commercial purposes. Requests can be submitted via the contact details below.
Children's Data: The Plugin is not intended for use in connection with services directed to children under the age of 13 (or the equivalent minimum age under applicable law). Zanopy does not knowingly collect or process personal data from children.
Zanopy's infrastructure may be located in countries outside of your jurisdiction, including outside the European Economic Area (EEA) or United Kingdom. Where personal data is transferred internationally, Zanopy relies on appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission, to ensure data is protected to an equivalent standard.
For privacy-related inquiries:
Zanopy is operated by FAI Tech Pte Ltd, registered in Singapore.
This privacy policy is effective as of April 30, 2026.