Privacy Policy

Last updated: September 24, 2026

This Privacy Policy describes how Uplify ("we", "us", or "our") collects, uses, and shares information when you use Uplify ‑ Bundles & Upsells (the "App"), a Shopify application available at https://bundle-app-ten.vercel.app.

1. Information We Collect

When you install and use the App, we collect the following categories of information:

Store information: Your Shopify store domain, shop name, currency, plan level, and timezone.
Product and order data: Product IDs, titles, prices, variants, and order totals — used to configure bundles, upsells, and discounts.
Customer email addresses: Collected only when a store visitor voluntarily enters their email via the Spin to Win widget to receive a discount code. These emails are stored and associated with your store.
App configuration settings: Your bundle settings, upsell configurations, widget customizations, and billing plan preferences.
Analytics data: Aggregated, non-personal statistics such as widget impression counts, click counts, and revenue attributions per feature. No individual customer browsing profiles are built.
Webhook events: Order-paid and app-uninstalled webhook payloads from Shopify, used to attribute revenue to App features and to clean up data on uninstall.

2. How We Use Your Information

We use the information we collect to:

Operate and deliver the App's features (bundles, upsells, cart drawer, spin-to-win, FBT, social proof, A/B testing, analytics).
Generate discount codes and deliver them to store visitors who enter the Spin to Win widget.
Display aggregated analytics within your App dashboard.
Process billing and subscription management via Shopify Billing API.
Respond to support requests and communicate important updates.
Comply with legal obligations, including GDPR data subject requests.

3. Data Sharing and Disclosure

We do not sell, rent, or trade your data or your customers' data to third parties. We may share data in the following limited circumstances:

Service providers: We use Vercel (hosting) and Supabase (database) to store and process data. These providers are contractually bound to handle data securely and only for the purpose of providing their services to us.
Support assistant: If you use the in-app support chat, your messages, together with your store's Uplify status (store domain, plan, whether the app embed is on, and your bundles' names, types and status), are sent to Anthropic, which provides the AI model that writes the replies. No shopper or customer data is sent. The chat is optional; you can always email us instead.
Legal requirements: We may disclose information if required to do so by law or in response to valid legal process.
Business transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction. We will notify you via prominent notice.

4. Data Retention

We retain your store's data for as long as the App is installed on your Shopify store. When you uninstall the App, we process the app/uninstalled webhook and delete your shop's configuration data, bundle settings, and associated analytics within 30 days. Customer email addresses collected via Spin to Win are deleted from our database within 30 days of App uninstall.

5. GDPR Compliance

The App supports Shopify's mandatory GDPR webhooks:

customers/redact: Upon receiving this webhook, we delete any stored email addresses associated with the specified customer.
shop/redact: Upon receiving this webhook (sent 48 hours after uninstall), we permanently delete all data associated with the shop.
customers/data_request: Upon receiving this webhook, we can provide any personal data we hold for the specified customer on request.

If you are a merchant in the European Economic Area (EEA) or the United Kingdom, you are the data controller for your customers' personal data. We act as a data processor on your behalf.

6. Security

We implement industry-standard security measures to protect the data we store, including HTTPS encryption in transit, hashed and signed Shopify session tokens, and restricted database access. However, no system is completely secure and we cannot guarantee absolute security.

7. Children's Privacy

The App is designed for use by Shopify merchants and is not directed at children under the age of 13. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page and, where appropriate, by sending a notification through the Shopify Partner Dashboard. Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Uplify
Email: uplifysuporte@gmail.com