Weblorium

TYNA Upsells privacy policy

Last updated 2 November 2026

What TYNA Upsells reads from your store and your buyers' orders, what it keeps, and how it is deleted. It applies to merchants who install the app and to buyers who see its offers.

Who we are

TYNA Upsells ("the app") is published by Weblorium ("we"). To reach us about privacy, use the support page.

What the app reads

  • Your store: its myshopify address and name, and whether it's a development store, through the Shopify Admin API.
  • Products you choose to offer: their title, variants, prices, compare-at prices, images and availability, so the offer shows the same information as your store. The app asks for permission to read products.
  • Your checkout's branding (colours, fonts, corner styles), only if you click Allow access under the offer preview. It's read to draw the preview, held in memory for a few minutes and never stored. This permission is optional and read-only.
  • The order a buyer just placed, on the post-purchase page: its line items, totals, shipping country, currency, language and whether the buyer has a customer account, so the app can pick the offer that fits. Shopify passes these to the app for that page only.

What the app keeps

  • Your offers and funnels: products, discounts, rules, design and wording you set.
  • Offer results: for each offer shown, whether the buyer accepted or declined it, the order's anonymous checkout reference, the order's total, and for accepted offers the variant, quantity and revenue added. These power the app's analytics.
  • Access tokens that let the app call Shopify for your store, encrypted at rest.

Who processes data for us

The app doesn't use AI services. We don't sell data, share it with anyone else, or use it for advertising, and the post-purchase page shows only products from your own store.

  • Shopify, the platform the app runs on.
  • Render, which hosts the app and its database in the European Union (Frankfurt, Germany).

How long data is kept

  • While the app is installed, offers and their results are kept so the app keeps working.
  • When you uninstall the app, its access tokens are deleted straight away.
  • Shopify then asks the app to erase your store's data (the shop/redact request, sent about 48 hours after uninstalling), and everything the app stored about your store is deleted: offers, funnels, offer results and the store record.
  • Requests about a buyer (customers/data_request and customers/redact) are answered by Shopify's process; the app holds no personal data about buyers to report or erase.

Your rights

You can ask what the app holds about your store, ask for a copy, or ask for it to be corrected or deleted at any time through the support page. Uninstalling the app also deletes everything, as described above. If you're in the EU, the UK or another region with data protection law, you have these rights under that law too.

Security

Data is sent over HTTPS, access tokens are encrypted at rest, every request from Shopify and from the post-purchase page is verified, and prices are always recalculated by the app before Shopify adds anything to an order.

Changes

When this policy changes, the date above changes with it.