Privacy policy · GMVify Post Purchase Upsell

GMVify Post Purchase Upsell (shown in your Shopify admin as GMVify Post Purchase, “the app”) is a Shopify app by Vitamin Creative Lab Limited (“we”, “us”). After a buyer pays, it shows an offer the merchant set up, and one click adds the item to the same order. When the original order holds a personalized item, the offer can reuse the photo link or text the buyer entered. The thank-you page can show a second offer with a one-time discount code for a new order. This policy explains what the app keeps, why, who receives it and how long it stays. It covers merchants who install the app and the buyers who see its offers in their stores.

What we collect

Data	From	Why
Store domain and access token	Shopify, when the merchant installs	To run the app
Plan, billing interval, trial end, coupon used, the date the Free plan’s 30-day periods start from, the store’s Shopify plan name and whether it’s a development store	Shopify billing	To apply plan limits and show the Plans page
Each accepted upsell: checkout token, offer and step, product variant, quantity, order ID and added line ID, the line’s amount after discount and its currency, the amount refunded and whether the order was cancelled	The post-purchase page, and order webhooks (orders/edited, refunds/create, orders/cancelled)	To add the item to the right order, for revenue and conversion analytics, and to count the Free plan’s limit
Each offer step shown or declined: checkout token, offer and step	The post-purchase page	Conversion analytics
Each thank-you code: the order it was made for, offer, variant, code and Shopify discount ID; the ID and subtotal of the order that used it	The thank-you page, and the orders/create webhook	To make one code per order, and for analytics
The date checkout last asked the app for an offer	The post-purchase page	To tick the setup step that chooses the app for the post-purchase page
A staff member’s chosen admin language, with their Shopify user ID	The admin	To show the app in that language

The offers a merchant sets up (products, discounts, texts and mockup settings) are kept in the merchant’s own store as app metaobjects, and the mockup images they upload are kept in the store’s Files. They are not in our database.

Buyer data

The app does not keep buyers’ names, email addresses, phone numbers, addresses or payment details. A checkout token identifies a checkout, not a person.
To show a personalized offer, the app reads the original order’s line item properties (for example a photo link or engraving text) while the buyer is on the post-purchase page. It composes a preview image in memory and sends it to the page; none of it is stored. Recently composed previews stay in the server’s memory (at most 50) and are gone when the server restarts.
When the buyer accepts, the personalization is written to the merchant’s order in Shopify (order metafields in the gmvify_post_purchase namespace, an order note attribute and a tag). That is the merchant’s order data; it stays with the order after the app is uninstalled.
A thank-you offer’s link carries the personalization into the new checkout as line item properties, in the buyer’s own browser.
Shopify charges an accepted upsell to the payment method the buyer just used. The app never sees card details.

Who we share data with

We do not sell data, use it for advertising or share it with ad networks. These providers receive data to run the app:

Provider	What for	What it receives
Render	Hosting the app and its database	Everything listed under “What we collect”
Shopify	The platform the app runs on	What the app writes to the store: offers, order metafields, discount codes and files

We may also disclose data when the law requires it.

How long we keep it

While the app is installed, records stay so analytics and the Free plan’s limit can count them.
When a merchant uninstalls, the access token is deleted at once, offers stop (checkout gets no answer from the app, and Shopify removes the app’s pages from checkout) and any paid plan ends. Shopify removes the app’s offers and settings from the store with the app.
48 hours later Shopify asks us to erase the store’s data, and we delete every record listed above. The trial and coupon a store used are kept only until then.
When Shopify sends a buyer’s erasure request, we delete the accepted upsells, shown and declined records and thank-you codes of that buyer’s orders. A buyer’s data request finds nothing we keep per buyer.

Your rights

Buyers: the store you bought from controls your order. Ask the store to see or delete your data; when Shopify sends us the store’s erasure request for your orders, we delete our records of them. You can also contact us directly.

Merchants: uninstalling removes your data as described above. Depending on where you live (for example the EU, UK or California) you have the right to access, correct, delete or move your data and to complain to a data protection authority.

Changes and contact

If we change this policy we will update the date above, and tell merchants in the app when the change is significant. Questions or requests: email support@gmvify.com or see the support page.