DTCUP Upsell Privacy Policy
Last updated: September 27, 2026
DTCUP LLC operates DTCUP Upsell & Cross sell (DTCUP Upsell), an app for Shopify merchants. This policy explains the data the app uses to configure offers, display them in a store, measure performance, and administer subscriptions.
Data we use
When a merchant installs the app, we receive the store domain, authorized Shopify API access, and information needed to maintain the installation. Merchants may save product selections, offer rules, storefront appearance settings, translations, and customer or segment identifiers used to target an offer. When a merchant selects specific customers, the app retrieves customer names and email addresses from Shopify to display the selection list; the saved targeting rules contain customer identifiers, not names or email addresses.
The app processes order and transaction details needed to verify purchases, measure offer performance, and calculate the number of eligible paid Online Store orders in a Shopify billing cycle. We store offer analytics and billing-cycle aggregates. Billing-cycle counting does not persist individual order or customer details. Shopify processes app subscription approval, billing, and payment.
Optional storefront interaction analytics are sent only when Shopify's Customer Privacy API permits analytics processing for that visitor. The app uses a session identifier for these events and browser storage to remember popup display preferences. Offer display and shopping features do not depend on analytics permission. When a merchant submits Feedback, the store domain, app page, message and optional contact email are sent to our support mailbox. The application database stores submission status and a content hash, not the message or contact email.
How we use data
We use this information to provide the features a merchant configures, synchronize app-owned discounts and offer data with Shopify, display relevant offers in the merchant's store, troubleshoot the service, prevent duplicate billing events, and meet applicable privacy requests. We do not sell merchant or customer personal data.
Sharing and storage
The app exchanges data with Shopify to operate the merchant's store and subscription. We host application data on AWS infrastructure in the United States. Access to production data is limited to authorized operators and service components. Shopify and our hosting providers process data under their own applicable terms.
Retention and privacy requests
We retain store configuration and related records while needed to provide the app, subject to applicable law and Shopify requirements. Uninstalling the app stops its access to the store. Shopify's customer data request, customer redaction, and shop redaction notices are processed through dedicated privacy webhooks. The app removes or de-identifies the covered records when required. A merchant can download an app-held customer data report to answer a verified customer request; fulfilled report contents are removed after seven days. Backup copies and operational records are handled under applicable retention and deletion procedures.
Scheduled maintenance removes interaction and order-attribution analytics older than 90 days, settled billing-cycle summaries and billing history older than 365 days, feedback submission metadata older than seven days, and completed privacy-request receipts older than 180 days. Cleanup runs in bounded batches. Unresolved billing events, pending privacy requests and minimal deletion-prevention records are retained while needed to complete or protect the relevant process. Verified deletion requests take priority over these routine periods. Support mailbox messages and backup copies are handled separately from online database cleanup.
Contact
For access, deletion, billing, or privacy questions about DTCUP Upsell, email admin@dtcup.com. Include the store domain so we can locate the correct installation. Do not send passwords or customer payment information.
Merchant Data Processing Agreement
This agreement describes how DTCUP LLC processes customer data on behalf of the Shopify merchant using DTCUP Upsell. It supplements the privacy policy above. Questions and instructions may be sent to admin@dtcup.com.
1. Instructions and responsibilities
The merchant determines the purposes of customer-data processing and is responsible for lawful instructions, customer notices and any required consent. DTCUP LLC processes customer data only to operate the app features configured by the merchant, provide necessary support, administer subscriptions, and assist with verified privacy requests. Installation, app settings and authorized support requests document the merchant's instructions. If an instruction cannot be fulfilled safely or appears inconsistent with applicable obligations, we will seek clarification before proceeding.
We do not sell customer data, build cross-merchant advertising profiles, or use one merchant's customer data to target another merchant's offers. Processing required by law is limited to that legal purpose.
2. Data and processing
Processing can involve store and installation identifiers, authenticated administrator sessions, customer and segment identifiers selected for targeting, order and transaction details needed for attribution and eligible-order counting, optional interaction analytics, and verified privacy-request records. Customer names and email addresses are retrieved from Shopify when a merchant uses the customer picker; saved targeting rules retain identifiers rather than names or email addresses. The app does not request customer phone numbers, postal addresses or payment-card credentials for these features.
Optional analytics respect the consent status provided by Shopify's Customer Privacy API. Merchants remain responsible for responding to their customers; we provide available app-held reports and deletion assistance through the verified privacy workflow.
3. Retention and deletion
| Record | Routine retention |
|---|---|
| Store configuration and offers | While needed for the installed service; merchant deletion and verified Shopify redaction requests take priority. |
| Interaction and order-attribution analytics | 90 days. |
| Settled billing-cycle summaries and billing history | 365 days for reconciliation, disputes and duplicate-event prevention. |
| Customer access-report contents | 7 days after the merchant marks the request fulfilled. |
| Feedback submission metadata | 7 days; this does not describe the separate support mailbox. |
| Completed privacy-request receipts | 180 days, with unnecessary payloads removed. |
| Personal-data access audit records | 30 days. |
| Personal data inadvertently present in operational logs | Remove or de-identify promptly; no longer than 30 days unless a documented legal or security-preservation need applies. |
| Database backups | Encrypted AWS RDS automated backups retained for 7 days. Routine server database exports are disabled. |
Cleanup runs in bounded batches. Pending privacy requests, unresolved billing events and minimal deletion-prevention records are retained only while needed for the relevant process. Any legal hold or dispute exception must have a documented purpose, restricted access and a review date. Verified deletion requests take priority over routine retention. Uninstallation stops app access; Shopify's redaction notifications are processed without deleting a valid reinstallation by mistake.
4. Confidentiality and security
Production customer data is held in the encrypted application database and encrypted RDS backups. Network connections to the app and database use TLS. Access is limited to authorized people and service components according to their duties; personnel must use individual accounts and strong credentials. Application access is authenticated, scoped to the merchant's store and audited. Direct administrative database access requires a separate record of its purpose, operator, time and scope.
Customer data must not be copied into development databases, ordinary office documents, chat, source repositories or personal storage. Exceptional extracts require documented approval, minimum necessary fields, suitable protection, an authorized recipient and a deletion time. Do not send passwords, access tokens, payment data or complete customer exports to our support mailbox.
5. Service providers and processing location
Amazon Web Services supplies the application's EC2 hosting and RDS database infrastructure in the United States, in the us-east-1 region. Shopify supplies the commerce platform, APIs and app billing under its applicable platform terms. Access and processing remain limited to the service purpose. We will update the published provider information before material changes and provide any notice required by the applicable agreement or law. Contact us for information about the safeguards applicable to your processing location.
6. Privacy requests and incidents
We assist the merchant with verified access, deletion and other applicable privacy requests. Requests must be authenticated and scoped to the correct store. If we identify a security incident affecting merchant customer data, we will contain the incident, preserve necessary evidence, assess the affected data and notify the appropriate merchant and other parties as required by applicable law and contract. Notifications will distinguish verified facts from matters still under investigation.
7. Termination and recovery
When the service ends, covered data is deleted or returned as appropriate under the merchant's instructions, Shopify's privacy notifications and the retention rules above. Backups are restricted to recovery and age out under their retention period. Before making restored data available, completed deletion requests must be reconciled so that erased data is not reintroduced. A restored environment is not opened for service while that reconciliation remains unresolved.
8. Changes and contact
We will identify the date of material changes and provide appropriate notice before revised processing commitments take effect. Contact DTCUP LLC at admin@dtcup.com for instructions, questions, or a request for relevant information about these measures.