Privacy Policy
Ultra Fast Upsells ("the App", "we", "us", or "our") is operated by LCH, under Grayson Lancer Cross ("Developer", "Company"), accessible at https://www.graysoncross.com.
This Privacy Policy explains how we collect, use, store, and protect personal data when merchants install and use the Ultra Fast Upsells Shopify application.
By installing or using the App, you agree to the practices described in this Privacy Policy.
1. Scope of This Policy
This Privacy Policy applies to:
- Shopify merchants who install and use Ultra Fast Upsells
- Personal data of merchants' customers processed on behalf of merchants
- Visitors interacting with post-purchase experiences created by the App
This policy does not apply to Shopify itself or to third-party services used by merchants outside the App.
2. Personal Data We Collect
We collect and process only the minimum data required to provide the App's functionality.
2.1 Merchant Data
- Store name and domain
- Store email address
- Shopify account identifiers
- App configuration and settings
2.2 Order & Customer Data (Processed on Merchant's Behalf)
- Order ID
- Order total and currency
- Product and variant information
- Line items added via post-purchase offers
- Customer ID (Shopify-generated)
- Timestamps and event data (views, accepts, declines)
3. How We Use Personal Data
We use collected data only for the following purposes:
- Providing post-purchase upsell functionality
- Displaying and processing post-purchase offers
- Calculating analytics, performance metrics, and A/B test results
- Generating revenue and conversion reports
- Sending app-related notifications and service emails to merchants
- Sending product updates and marketing emails related to the App (merchants can opt out)
- Maintaining app stability, security, and error handling
We do not use personal data for unrelated purposes.
4. Data Minimization & Purpose Limitation
We follow strict data minimization principles:
- We collect only what is necessary for the App's features
- We do not use personal data beyond the purposes described above
- We do not modify merchant orders outside approved post-purchase actions
5. Data Sharing & Disclosure
5.1 We Do NOT Sell Personal Data
We do not sell, rent, or trade personal data to third parties.
5.2 Limited Sharing
We may share data only when necessary with:
- Cloud infrastructure providers (hosting, databases, backups)
- Analytics or monitoring tools used internally for app reliability
All such providers are contractually required to protect data and use it only for service delivery.
6. Customer Consent & Merchant Responsibility
- Ultra Fast Upsells processes customer data on behalf of merchants
- Shopify merchants are responsible for obtaining any required customer consent
- The App respects Shopify platform consent mechanisms
- We do not independently collect consent from end customers
7. Data Retention
We retain personal data only as long as necessary to:
- Provide analytics and reporting
- Maintain billing accuracy
- Comply with legal and contractual obligations
When data is no longer required, it is securely deleted or anonymized.
8. Data Security
We take appropriate technical and organizational measures to protect personal data, including:
- Encryption of data in transit (TLS/HTTPS)
- Encryption of data at rest
- Encrypted backups
- Role-based staff access controls
- Strong password and authentication requirements
- Separation of test and production environments
- Monitoring and logging of system access
9. Staff Access Controls
- Access to personal data is limited to authorized personnel only
- Staff access is granted on a need-to-know basis
- Access activity is logged and monitored
10. Security Incident Response
We maintain internal procedures to detect, respond to, and mitigate security incidents. If a data breach occurs, we will notify affected merchants as required by applicable law and Shopify policies.
11. International Data Transfers
Personal data may be processed and stored in countries other than the merchant's country, depending on infrastructure location. Appropriate safeguards are applied to protect data in accordance with applicable laws.
12. Merchant Rights
Merchants may:
- Request access to or deletion of their data
- Uninstall the App at any time via Shopify Admin
- Manage marketing email preferences
Requests can be submitted using the contact details below.
13. Children's Data
The App is not intended for use by children, and we do not knowingly collect personal data from individuals under 16 years of age.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the App or our website.