Privacy Policy

UpsellMate is a Shopify app that helps merchants create and measure upsell offers across post-purchase, checkout, thank-you page, and product page experiences. This Privacy Policy explains what information we collect, how we use it, and the choices available to merchants and their customers.

Information We Collect

When a merchant installs or uses UpsellMate, we may collect and process:

• Shop information, such as store domain, app settings, currency, and installation status.
• Product and variant information needed to configure and display offers.
• Order information, such as order IDs, order totals, line items, purchased products, timestamps, and offer acceptance events.
• Limited customer information associated with orders, such as customer email, when Shopify provides it and when it is needed for analytics, attribution, or merchant reporting.
• Discount, checkout, shipping, analytics, and app configuration data needed to provide the app's features.
• Technical information, such as logs, error reports, request metadata, and authentication/session data used to keep the app reliable and secure.

How We Use Information

• To install, authenticate, operate, and secure the UpsellMate app.
• To create, display, personalize, and track upsell offers for merchants.
• To provide analytics, reporting, billing-plan usage checks, and performance measurement.
• To troubleshoot issues, prevent abuse, improve reliability, and support merchants.
• To comply with legal obligations, Shopify platform requirements, and applicable data protection rules.

Sharing and Service Providers

We do not sell personal information. We may share information only when necessary to operate the app, comply with law, or protect the app and its users. UpsellMate may use trusted service providers for hosting, infrastructure, databases, logging, analytics, email support, and payment or billing workflows. These providers are permitted to process information only as needed to provide services to UpsellMate.

Data Retention and Deletion

We retain merchant and app data for as long as needed to provide UpsellMate, support merchants, maintain business records, and comply with legal obligations. When a merchant uninstalls the app or requests deletion, we delete or anonymize applicable store and customer data within a reasonable period, unless retention is required by law, security, fraud prevention, or legitimate business recordkeeping.

UpsellMate supports Shopify privacy compliance webhooks for customer data requests, customer deletion requests, and shop deletion requests.

Merchant and Customer Rights

Depending on location, merchants and customers may have rights to access, correct, delete, restrict, or object to certain processing of personal information. Merchants can contact us for app-related requests. Customers should usually contact the Shopify merchant first, because the merchant is the primary controller of customer order data.

GDPR, EEA, and UK Rights

If you are located in the European Economic Area, the United Kingdom, or another region with similar data protection laws, you may have rights under the GDPR or applicable local law. These rights may include access, rectification, erasure, restriction, portability, objection to processing, and the right to withdraw consent where processing is based on consent.

For Shopify customer data, the merchant is usually the data controller and UpsellMate acts as a processor or service provider. Customers should contact the merchant first for requests related to orders placed with that merchant. Merchants can contact UpsellMate for app-related privacy requests.

Cookies and Authentication

UpsellMate uses Shopify authentication and session mechanisms to identify installed stores and keep merchant sessions secure. The app may also use cookies or similar technologies required for login, embedded app behavior, security, preferences, and basic app operation.

Security

We use reasonable administrative, technical, and organizational safeguards to protect information processed by UpsellMate. No method of transmission or storage is completely secure, but we work to protect data against unauthorized access, misuse, loss, and alteration.

International Processing

Information may be processed in countries other than where a merchant or customer is located. Where required, we take steps intended to protect personal information according to applicable law.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the date above and may provide additional notice where required.

Contact

For privacy questions or data requests, contact us at upsellmate@iconfanatics.com.