TYNA Post Purchase Upsell privacy policy

What the app reads

• Your store: its myshopify address and name, and whether it's a development store, through the Shopify Admin API.
• Products you choose to offer: their title, variants, prices, compare-at prices, images and availability, so the offer shows the same information as your store. The app asks for permission to read products.
• Your checkout's branding (colours, fonts, corner styles), only if you click Allow access under the offer preview. It's read to draw the preview, held in memory for a few minutes and never stored. This permission is optional and read-only.
• The order a buyer just placed, on the post-purchase, Thank you and Order status pages: its line items, totals, country, currency, language, whether the buyer has a customer account and that account's id, so the app can pick the offer that fits. Shopify passes these to the app for those pages only.
• A buyer's customer tags, only if you add a "Customer tags" rule to an offer and allow the app to read customers. The app reads the tags of the buyer who just paid, keeps them in memory for a few minutes and never stores them, or their customer id.

What the app keeps

• Your offers and funnels: products, discounts, rules, design and wording you set.
• Offer results: for each offer shown, whether the buyer accepted or declined it (or, on the Thank you page, opened its link), the order's reference, the order's total, and for accepted offers the variant, quantity and revenue added. These power the app's analytics.
• Discount codes for Thank you page offers, only if you allow the app to create them: the code is created in your Shopify store for that one product, usable once per customer, and deleted when you delete the offer. The app keeps the code and its Shopify id, and reads how many orders used it.
• Change history: for every change to an offer or a funnel, what changed (old and new values), when, from which screen, and which staff member made it: their Shopify user id, name and email, as Shopify reports them for the account signed in to your admin. It's shown to your store's staff in the app's History and Activity pages.
• Photos uploaded for an offer while uploads were offered (offers now show only the product's own photos from Shopify, so these are no longer shown): the image file, kept in the app's database (hosted by Render, below) until it's removed from the offer, the offer is deleted or saved again, or the app is uninstalled. Uploads never saved on an offer are deleted after a day.
• Access tokens that let the app call Shopify for your store, encrypted at rest.

Who processes data for us

Apart from Auto-translate, the app doesn't use AI services. We don't sell data, share it with anyone else, or use it for advertising, and the post-purchase page shows only products from your own store.

• Shopify, the platform the app runs on.
• Render, which hosts the app and its database in the European Union (Frankfurt, Germany).
• Anthropic, only when you click Auto-translate on an offer: the offer's headline and description you wrote are sent to Anthropic's Claude API to draft translations, which you review before saving. No buyer or order data is ever sent. Under its commercial terms, Anthropic doesn't use this to train its models by default.

How long data is kept

• While the app is installed, offers and their results are kept so the app keeps working.
• When you uninstall the app, its access tokens are deleted straight away.
• Shopify then asks the app to erase your store's data (the shop/redact request, sent about 48 hours after uninstalling), and everything the app stored about your store is deleted: offers, funnels, offer results, uploaded photos, change history, staff names and emails, and the store record.
• Requests about a buyer (customers/data_request and customers/redact) are answered by Shopify's process; the app holds no personal data about buyers to report or erase.

Your rights

You can ask what the app holds about your store, ask for a copy, or ask for it to be corrected or deleted at any time through the support page. Uninstalling the app also deletes everything, as described above. If you're in the EU, the UK or another region with data protection law, you have these rights under that law too.

Security

Data is sent over HTTPS, access tokens are encrypted at rest, every request from Shopify and from the post-purchase page is verified, and prices are always recalculated by the app before Shopify adds anything to an order.

Changes

When this policy changes, the date above changes with it.