Privacy Policy

Last updated: July 4, 2026

This Privacy Policy explains how Upselly (“we”, “us”) handles data when you install and use the Upselly app for Shopify.

Who we are

Upselly is a Shopify app operated by M1B INC. (“we”, “us”) that lets merchants create upsell and cross-sell offers, bundles, BOGO deals, free gifts, and cart goals in their storefront. M1B INC. is the data controller for the data described in this policy. Contact: info@cnversion.io

Data we collect

From merchants (you):

• Your shop domain and Shopify session data, required for the app to authenticate with Shopify.
• Your app configuration — offer rules, design settings, and excluded products — which you create in the app admin.
• Aggregate order counts from your shop, used solely to determine your billing plan tier. We do not store individual order contents.
• Messages you send to our support channel, including any information you choose to include in them.

From your customers (storefront visitors):

• The Upselly storefront widget runs in your shop’s theme to display offers. It does not collect, store, or transmit personal information about your customers to our servers. It does not set tracking cookies and does not profile visitors.

How we use data

• To operate the app: authenticate your shop, store your settings, and render your configured offers in your storefront.
• To bill you through Shopify’s billing system, based on order volume tiers.
• To provide support and improve the product.

We do not sell data, share it with advertisers, or use your shop’s data to train machine-learning models.

AI-assisted support

Upselly support is AI-first. Messages sent to our support channel are processed by AI systems (including large language models operated by Anthropic) to classify, investigate, and respond to your request. Do not include passwords or payment card numbers in support messages. Support conversations are handled through Intercom, which acts as a data processor; see Intercom’s privacy policy.

Where data lives

App data is stored in a managed PostgreSQL database and served through Cloudflare’s global network. Your app settings are also mirrored to a metafield in your own Shopify store so the storefront widget can read them directly from Shopify.

Data retention and deletion

• When you uninstall Upselly, Shopify notifies us and we delete your shop’s data in accordance with Shopify’s mandatory compliance webhooks (shop/redact).
• We honor Shopify’s customers/data_request and customers/redact requests; because we do not store customer personal data, these typically return or delete nothing.
• You may request deletion of your data at any time via support.

Legal bases (GDPR)

Where GDPR applies, we process data to perform our contract with you (operating the app), and on legitimate interest (support, security, and product improvement). You have the right to access, correct, export, and delete your data, and to lodge a complaint with your supervisory authority.

Changes

We may update this policy; material changes will be noted in the app or on this page with a new “last updated” date.