Privacy policy

Last updated: October 15, 2026

OrderBoost Upsell ("the app", "we") shows discounted product offers on the Thank-you page of Shopify stores. This policy explains what data the app collects when a merchant installs it, how that data is used, and how it is deleted.

Data we collect

From the merchant's store

• The store's myshopify domain, currency, timezone and the access token Shopify issues to the app.
• The funnels and offers the merchant creates (products, discounts, triggers and design settings).
• The merchant's plan, so the app can apply the right plan limits.

From orders

The app receives new orders from Shopify to find orders that came from an upsell offer. For those orders only, it stores the order ID and number, the upsell product, purchase type (one-time or subscription), quantity, revenue and currency, and the order date. All other orders are ignored and not stored.

From the Thank-you page

When a customer has allowed analytics in the store's cookie or privacy settings, the app records that an offer was shown or clicked, linked to the order ID. Without that permission nothing is recorded.

What we do not collect

The app does not store customer names, email addresses, phone numbers, postal addresses or payment details, and it does not set tracking cookies.

How we use the data

• To show the merchant's offers on the Thank-you page and apply their discounts at checkout.
• To show the merchant analytics: views, clicks, upsell orders and revenue.
• To apply plan limits, such as the Free plan's monthly upsell revenue limit.

We do not sell data, share it for advertising, or use it for any other purpose.

Sharing

Data is processed by Shopify (which provides the store, checkout and billing) and by our hosting and database providers, which store it on our behalf. To convert revenue to US dollars, the app downloads public exchange rates; no store or customer data is sent in that request.

If a merchant starts a live chat from the app's Help page, the chat is provided by tawk.to, which receives the messages, the store's domain and any contact details the merchant chooses to share. The chat is not loaded until the merchant opens it.

Retention and deletion

• Offer view and click records are deleted after 400 days.
• Upsell order records are deleted after 25 months.
• When the app is uninstalled, its access token is deleted immediately, and all of the store's data is deleted when Shopify sends its shop deletion request, 48 hours after uninstall.
• Customer data requests and deletion requests made through Shopify are handled automatically: the app reports or deletes the records linked to that customer's orders.

Your rights

Customers can request access to, or deletion of, their data by contacting the store they bought from; the store's request reaches us through Shopify. Merchants can contact us directly at any time.

Security

Data is sent over encrypted connections (HTTPS). Requests from Shopify are verified with Shopify's signatures, and each store can only access its own data.

Changes

If this policy changes, we will update the date at the top of this page.

Contact

Questions about privacy: farhan.mywork@gmail.com