Privacy Policy

Who we are

FlatUpsell is a Shopify application operated by Arthur Cuco. Contact: support@flat-upsell.eu.

What the app stores

When a merchant installs FlatUpsell, we store the shop domain and the access token Shopify issues, which is what lets the app talk to that shop. We also store the offer rules the merchant configures — which product triggers an offer, which product is offered, and at what discount.

Each time an offer is shown to a shopper we record one row: which rule it was, whether it was accepted or declined, the additional amount and its currency, and the time. For post-purchase offers we also store the checkout reference Shopify provides, used only to avoid showing the same offer twice for one order.

What the app does not store

No shopper personal data. We do not store names, email addresses, shipping addresses, or anything that identifies an individual shopper.

No payment data, ever. When a shopper accepts a post-purchase offer, our server signs a cryptographic token and hands it back to Shopify, which charges the payment method it already holds. Card details never reach our servers.

This website

We count visits to measure traffic. There are no cookies and no advertising trackers, and we do not store IP addresses. A visitor is a one-way hash of the IP address, the browser user-agent and a random value regenerated every day and then discarded. Once the day’s value is gone, nothing links two visits together and nothing can be traced back to a person.

Who else sees the data

Shopify — the platform the app runs on, and the source of the shop data described above.

Scaleway — our hosting provider. Servers and data are located in France, inside the European Union.

No data is sold, rented, or shared with anyone else.

How long we keep it

Offer rules and their statistics are kept while the app is installed. When a merchant uninstalls, Shopify notifies us and the shop’s data is deleted within 30 days. Deletion can be requested sooner at the address above.

Website visit records are kept for 13 months and are anonymous from the moment they are written.

Your rights

Under the GDPR you may request access to the data we hold about your shop, ask for it to be corrected, or ask for it to be deleted. Write to support@flat-upsell.eu and we will respond within one month. You may also lodge a complaint with your national data protection authority — in France, the CNIL.

Changes

If this policy changes in a way that affects what we collect or why, the date above changes and installed merchants are notified by email.