Privacy Policy – Cart Upsell & Bundles - PTI

At Cart Upsell & Bundles - PTI (developed by Prerna Trimurty Infotech Pvt. Ltd.), we value the privacy and trust of our merchant partners and their customers. We are fully committed to handling your data securely, transparently, and in strict compliance with Shopify’s Partner Program standards and global privacy regulations (including GDPR and CCPA).

This Privacy Policy explains how our app collects, uses, processes, and protects information when installed on a Shopify-supported online store. Our mission is to help merchants enhance their Average Order Value (AOV) through in-cart upsells, product bundles, paired product matches, and free shipping progress bars—while maintaining the highest standards of data security and shopper privacy.

When you install and configure Cart Upsell & Bundles - PTI, we access and process specific store information strictly required to power the app’s features.

To deliver our functionality, the app requests the following Shopify access scopes:

• read_products – Allows the app to read product details (titles, images, pricing, and variants) so merchants can select target products, configure bundles, and recommend complementary upsells.
• read_themes – Enables the app to detect active themes and verify zero-code installation via Shopify Theme App Embeds without modifying the merchant's theme liquid code.
• write_app_proxy – Allows our app to securely serve recommendation widgets, bundle offers, and shipping goals to shoppers on the storefront via Shopify’s encrypted App Proxy (/apps/sales-booster).
• write_cart_transforms – Enables Shopify’s native Cart Transform API (linesMerge) to combine bundled products into a unified bundle line item at checkout and apply bundle pricing adjustments.
• read_discounts & write_discounts – Allows the app to automatically configure promotional discounts and free shipping delivery discounts in checkout when configured thresholds are met.

What We DO NOT Collect:

• We never access, collect, or store sensitive buyer personal information (such as customer credit card details, payment passwords, home addresses, or personal phone numbers).
• We do not collect any merchant banking credentials or Shopify admin passwords.
• We do not collect or store personal customer profiles or personally identifiable information (PII).

To provide merchants with transparent reporting in their app dashboard, we collect limited, non-identifiable usage statistics:

• Impression Events: Anonymous counter incremented when an upsell, bundle, or shipping bar is rendered on the storefront.
• Click Events: Anonymous counter incremented when a shopper clicks an add-to-cart or accept button on an offer.
• Conversion & Revenue Attribution: When a shopper adds a recommended bundle or upsell item to their cart, our secure App Proxy logs an anonymous conversion event attributed to the specific offer ID (_booster_offer_id, _booster_type). No personal buyer identities, names, or addresses are stored with these events.

All collected data is used exclusively to operate and enhance the app's capabilities:

1. Render customized upsell recommendations inside cart drawers or product pages.
2. Display Frequently Bought Together bundles and "Pair With" product matches on product pages.
3. Calculate and display real-time progress toward free shipping goals.
4. Seamlessly bundle items and apply automatic delivery discounts in checkout via Shopify Functions.
5. Provide merchants with accurate performance metrics (impressions, clicks, conversions) inside their Shopify admin.

We never sell, rent, monetize, or share merchant or customer data with third parties for marketing, advertising, or profiling purposes.

• Data Minimization: We store only the merchant's configuration rules (offer settings, widget styles, goals) and aggregate analytics counters.
• App Uninstallation: When a merchant uninstalls the app from their Shopify store, an automated app/uninstalled webhook triggers the immediate deactivation of all active sessions and access tokens.

GDPR Mandatory Webhooks:

We fully support and comply with Shopify’s mandatory GDPR privacy webhooks:

• customers/data_request: We respond promptly to confirm that no customer personal data is held.
• customers/redact: We confirm that no individual customer identifiers require deletion.
• shop/redact: All stored shop configurations, widget settings, and analytics records are permanently purged within 48 hours of receiving a shop deletion request from Shopify.

Our storefront scripts (booster-core.js) utilize lightweight browser localStorage or temporary session state strictly for functional purposes:

• Maintaining the open/closed state of the shopper's cart drawer.
• Preventing duplicate error notifications upon rapid clicking.
• Ensuring smooth widget rendering without flickering.

We do not use persistent cross-site tracking cookies or third-party advertising cookies.

We implement industry-standard security safeguards to protect your data. All communication between the merchant’s storefront, Shopify’s servers, and our backend is encrypted using Transport Layer Security (TLS/SSL). Database access is restricted, authenticated, and securely managed on dedicated cloud infrastructure.

We may periodically update this Privacy Policy to reflect changes in our app’s features or evolving legal requirements. Any modifications will be posted directly to this page with an updated revision date.

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact our dedicated team:

• Company: Prerna Trimurty Infotech Pvt. Ltd. (PTI WebTech)
• Email: sales@ptiwebtech.com
• Phone / WhatsApp Support: +91 9996771366
• Website: https://ptiwebtech.com