Privacy Policy.

This policy explains how Amplisio Profit Upsell handles personal data. It is intended to describe the released service accurately; it is not a claim of legal certification or lawyer review.

Operator and contact

Amplisio Profit Upsell is operated by Gediminas Simkus, an individual operating under the Amplisio apps brand.

Volunges 12-9
Alytus, 65487
Lithuania

Registration number: Not applicable; the operator is not a registered company.

Privacy and support email: amplisio.apps@gmail.com

The operator is the data controller where Amplisio determines how and why personal data is processed, including service administration, security, support and website communications. Where Amplisio processes Shopify store or customer information only to provide the app on a merchant's instructions, the merchant remains responsible for its customer relationship and Amplisio acts as its service provider or processor, as applicable.

Information we process

When a merchant installs or opens Amplisio, Shopify provides information needed to authenticate and operate the app. This can include the shop domain, authorization scope, session state and expiry, access credentials, and staff-account identifiers, name, email, locale and account flags when Shopify supplies them.

The app reads product and inventory information permitted by the merchant's Shopify installation, including product and variant identifiers, titles, images, prices, availability and product-cost information where available. It stores merchant settings such as cost overrides, fee and shipping assumptions, minimum-margin guardrails, product-page upsell rules, and widget content and design choices. It derives profitability estimates, product classifications, suggestions and guidance from those inputs.

The storefront widget sends limited offer context and interaction types through Shopify's authenticated app proxy. This context includes the shop, rule, placement, base and offered product, selected variant, and an event identifier. Eligible product-page views and verified add-to-cart accepts are aggregated by shop and rule. An add click or View cart click can be accepted by the service without becoming a separate aggregate metric. Verified accepts mean that the offered variant was confirmed in the Shopify cart; they are not completed purchases, attributed revenue or realized profit.

Amplisio does not store a shopper cart snapshot, payment-card information, completed-order details, or buyer name and email through the released widget event flow. Shopify operates the storefront cart and checkout.

Service infrastructure processes normal operational metadata, which can include IP or network information, URL paths, shop identifiers, timestamps, response status, and limited error context. Amplisio's production application access logger omits URL query strings. Application logs can still contain operational shop, product or rule identifiers needed to diagnose the service.

If you contact us, we process your email address and the information you choose to provide. Please do not send passwords, access tokens, payment information or unnecessary customer records.

How and why we use information

We use information only as needed to:

• authenticate authorized Shopify users and operate the installed app;
• retrieve permitted product and inventory information;
• calculate merchant-configured profitability estimates and guardrails;
• create and display product-page add-on offers;
• confirm and count eligible storefront interactions;
• preserve merchant settings and provide Profit Intelligence guidance;
• secure, maintain, troubleshoot and improve service reliability;
• respond to support and privacy requests; and
• meet applicable legal obligations.

Depending on the context, processing is based on providing the service or taking steps requested by a merchant, our legitimate interests in operating and securing the service, compliance with legal obligations, or consent where we specifically request it. We do not use merchant or support data for advertising, sale of data, unrelated profiling, or AI model training.

Service providers and data locations

We use the following services for limited operational purposes:

• Shopify provides installation, authentication, Admin APIs, app proxy, theme delivery, storefront cart and checkout services.
• Render hosts the production application and production PostgreSQL database in Frankfurt, Germany, and provides runtime logging and recovery services.
• Gmail receives support and privacy correspondence sent to amplisio.apps@gmail.com.
• Supabase is used only for separate staging and test infrastructure. It is not the live production database, and production merchant records are not intentionally copied into it.
• Netlify hosts the public Amplisio website, including these legal and support pages. Normal website-request metadata can be processed when a visitor opens the site.
• YouTube hosts promotional and reviewer media. Playing embedded or linked media can involve YouTube's own data handling; app offer-event payloads are not sent to YouTube.

We do not maintain manual exports of merchant or support data. Service providers may process information in locations described in their own terms and privacy materials. This policy does not claim that every provider support, security or network operation occurs only in Lithuania or the European Economic Area. Contact us for information relevant to a particular transfer.

Retention and deletion

Installed-shop application records are kept while reasonably needed to operate the service. Shopify's authenticated shop-redaction webhook deletes shop-owned application records from the active production database. Uninstall removes app sessions; remaining shop business records are removed through the subsequent Shopify shop-redaction process rather than being represented as erased instantly at uninstall.

Completed and “No relevant records” customer privacy-request receipts are retained for 90 days after completion and are then deleted automatically. Pending and failed requests remain until resolved. These receipts are minimized: the app does not retain complete webhook bodies, raw customer email or phone values, order lists, HMAC signatures, access tokens, cookies or authorization headers. A customer privacy webhook receipt is not itself proof that a separate access or deletion request has been completed.

Production application logs are normally retained within Render's current rolling log window of seven days. The production database currently has a three-day point-in-time recovery window. Removing active data does not immediately remove it from every recovery copy; those copies expire through the provider's recovery schedule. If data is restored, applicable completed deletions must be reapplied before the restored service is returned to use.

Support and privacy correspondence is retained only as long as reasonably necessary to resolve the request and is deleted when no longer reasonably needed, unless a longer period is required by law. We do not keep routine manual merchant or support-data exports.

Rights and choices

Depending on the law and processing involved, individuals may have rights to access, correct, erase, restrict or object to processing, and to receive portable data. Where processing relies on consent, consent may be withdrawn without affecting earlier lawful processing.

Send requests to amplisio.apps@gmail.com. We may request proportionate information to verify authority and locate relevant records. Shoppers should also contact the merchant operating the Shopify store, which controls its customer relationship and Shopify order records.

Individuals may complain to the Lithuanian State Data Protection Inspectorate or another competent supervisory authority. Information about the Lithuanian authority is available at vdai.lrv.lt/en.

Merchants can disable storefront offers through Amplisio and can uninstall the app through Shopify. The released widget does not create a persistent Amplisio tracking cookie or browser identifier; its view deduplication is held in memory. Shopify, Netlify, YouTube and other browser services can have their own cookies or storage under their respective policies.

Security and changes

Amplisio uses Shopify authentication, authenticated app-proxy and webhook handling, HTTPS communications, shop-scoped database access, and query-free application access logging. No internet service can guarantee perfect security, and this policy does not claim a security certification.

We may update this policy when the service or legal requirements change. The public page will show the effective date. Material changes will receive appropriate notice where required.

Contact: amplisio.apps@gmail.com