Privacy Policy

Last updated: 2026-09-11

AOV Booster ("the App", "we", "us") is a Shopify app that shows upsell and cross-sell offers on a merchant's product pages and post-purchase page. This policy explains what data the App handles and why.

Summary

The App does not collect or store any personal data about your customers. It stores your upsell rules and aggregate performance counts for your shop, and the access token Shopify issues so it can talk to your store.

Data we store

When you install the App and use it, we store:

• Your shop's myshopify.com domain and the offline access token Shopify grants at install. The token is used only to call the Shopify Admin API on your behalf (e.g. to read your shop's currency and to create usage-based billing charges).
• Your upsell rules: the Shopify product and variant IDs you choose as triggers and suggestions, plus cached copies of their title, handle, image URL and price for faster display, and any discount percentage you set.
• Aggregate event counts: each time an offer is shown, clicked, or converted, we record a row with the shop domain, the rule ID, the event type, the suggested product ID, and — for conversions — the monetary value that was added to the order. These rows are not linked to any customer identifier (no name, email, address, customer ID, or IP).
• Your billing state: whether your shop has an active subscription, and which conversion events have already been included in a usage charge.

We do not collect or store customer names, email addresses, shipping or billing addresses, phone numbers, IP addresses, payment details, or any other customer personal information.

How data is used

• To decide which offer (if any) to show on a given product or order.
• To show you performance analytics for your rules.
• To calculate and submit the 2% usage-based charge through Shopify's billing system.

We do not sell data, and we do not use it for advertising or profiling.

Sharing

• Shopify. The App runs on Shopify's platform and exchanges data with Shopify's APIs as needed to function.
• Our hosting provider. Application data is stored on infrastructure operated by our hosting provider solely to run the App.
• We do not share data with any other third parties.

Retention and deletion

• Rule and analytics data is kept for as long as the App is installed.
• When you uninstall the App, Shopify sends an app/uninstalled webhook and we delete your shop's session/token.
• Shopify's mandatory compliance webhooks are honored:
  • customers/data_request and customers/redact — we hold no customer personal data, so there is nothing to return or erase; the request is acknowledged.
  • shop/redact (sent ~48 hours after uninstall) — we permanently delete all data associated with your shop (rules, suggested products, analytics events, billing state, sessions).

Your rights

Depending on where you are located (e.g. GDPR in the EU/UK, CCPA in California), you may have the right to access, correct, or delete data we hold about your shop, or to object to or restrict its processing. Because the App holds no customer personal data, these rights apply to merchant/shop-level data. To exercise them, email us at the address below.

Security

Access tokens are stored in the App's database and used only server-side. Requests from your storefront and checkout are verified with Shopify's signature/JWT mechanisms before any data is returned.

Changes

We may update this policy. Material changes will be reflected in the "Last updated" date and, where required, communicated through the App or the App Store listing.

Contact

aovbooster.support@gmail.com