Legal

Privacy Policy

Last updated August 11, 2026

This Privacy Policy explains what information UpCartAOV ("we," "our," "us") collects when a merchant installs the UpCartAOV Shopify app, how we use it, and the choices merchants and their customers have. It applies to the UpCartAOV app and this website.

1. Information we collect

When you install UpCartAOV, Shopify grants us access to store data through the Shopify Admin API, scoped to what each enabled block requires:

We do not require or request access to full customer profiles, payment details, or Shopify Payments information to operate any UpCartAOV block.

If you use the contact form on this website, we collect the name, email, store URL, topic, and message you submit so we can reply. That submission is delivered to our support inbox through a form processing provider.

2. How we use information

We do not sell store or customer data, and we do not use it to build advertising profiles.

3. Cookies and tracking

The UpCartAOV theme app extension blocks run on your storefront to render recommendations and cart messaging. They do not set third-party advertising or tracking cookies. Our own dashboard and marketing website use limited first-party cookies for authentication and basic analytics.

4. How we share information

We share store data only with service providers who help us run UpCartAOV — such as hosting and infrastructure providers — under confidentiality obligations, and only to the extent needed to provide the service. We may also disclose information if required by law or to protect the rights, property, or safety of UpCartAOV, our merchants, or others.

5. Data retention

We retain store data for as long as your UpCartAOV subscription is active. When you uninstall the app, Shopify sends us a mandatory shop-redaction webhook, and we delete or anonymize the associated data within the timeframe required by Shopify's Partner and API terms.

6. Your rights and data requests (GDPR/CCPA)

UpCartAOV implements Shopify's mandatory GDPR webhooks:

Merchants and their customers can also contact us directly at anurag.pandey17@gmail.com to request access, correction, or deletion of personal data, consistent with applicable law, including the GDPR and the CCPA.

7. International data transfers

UpCartAOV may process and store data in countries other than your own. Where we transfer personal data internationally, we rely on appropriate safeguards required under applicable data protection law.

8. Children's privacy

UpCartAOV is a business-to-business tool intended for use by merchants operating Shopify stores. It is not directed at children, and we do not knowingly collect personal information from individuals under 16.

9. Security

We use industry-standard technical and organizational measures — including encryption in transit, access controls, and regular review of our systems — to protect the data we process. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page, and, where required, we'll provide additional notice.

11. Contact us

Questions about this Privacy Policy or your data can be sent to anurag.pandey17@gmail.com or through our Contact page.

Frequently asked questions

What data does UpCartAOV collect from my store?

UpCartAOV accesses store data through the Shopify Admin API that's required to power its features — product catalog details, collection data, order line items, and cart totals. We only request the API scopes each enabled block actually needs.

Does UpCartAOV access my customers' personal information?

UpCartAOV's recommendation and cart blocks operate on product and order data, not customer profiles. Where limited customer or order data passes through our systems to render a block, it is processed only to deliver that feature and is not sold or used for advertising.

How do I request access to or deletion of my data?

Uninstalling UpCartAOV triggers Shopify's mandatory data-erasure webhooks, which remove your shop's stored data from our systems. You can also email anurag.pandey17@gmail.com to request a copy or deletion of your data at any time.

Is UpCartAOV GDPR and CCPA compliant?

Yes. UpCartAOV implements Shopify's mandatory GDPR webhooks (customer data request, customer redact, shop redact) and honors data access, correction, and deletion requests consistent with GDPR and CCPA.