UpRevApps Shopify Apps Privacy Policy

Effective Date: April 9, 2026

1. Introduction

This Privacy Policy explains how UpRevApps ("UpRevApps", "we", or "us") collects, uses, shares, and protects personal information when merchants install or use UpRevApps Shopify applications (each an "App" and collectively the "Apps") in connection with their Shopify-powered stores. Merchants that use Shopify are generally required by Shopify and by applicable privacy laws to maintain clear, accessible privacy notices explaining how personal data is processed, including when using third-party apps such as the Apps.

Data Controller:
UpRevApps
Svitrigailos g. 11K-109
Vilnius, Lithuania
Email: help@uprevapps.com

2. Scope and Roles

This Privacy Policy applies to personal information processed through any Shopify application published by UpRevApps (the "Apps"), including but not limited to:

As UpRevApps releases additional Shopify apps, they will also be covered by this Privacy Policy unless stated otherwise in a separate or app-specific privacy notice.

This Privacy Policy applies to personal information processed through the Apps about the following categories of individuals:

For most processing of end-customer data, the merchant is the "data controller" (or equivalent term under applicable law), and UpRevApps acts as a "data processor" or "service provider" that processes personal information on the merchant's documented instructions through the Apps.

3. Information We Collect

The specific information the Apps collect depends on which App you use and how your store is configured. In general, the Apps may process the categories of information listed below, in line with common Shopify privacy and compliance requirements.

3.1 Information from Your Shopify Account (Merchant Data)

When you install an App, Shopify automatically provides UpRevApps with certain information related to your store so the App can function properly. This typically includes:

3.2 Information You Provide Directly

You may provide additional information directly to UpRevApps when you:

The exact data collected depends on the form or interaction and will be limited to what is necessary to respond to your request or provide the relevant feature.

3.3 Information About Your Store and End Customers

To provide the functionality of the Apps, UpRevApps may process certain information about your store's activity and, in some cases, your customers, as enabled by Shopify's APIs and by your configuration. Depending on the App and your settings, this may include:

The Apps are designed to follow Shopify's data minimization and protected customer data guidelines and only process the minimum personal data needed to deliver the App's functionality.

3.4 Automatically Collected Information (Cookies, Logs, and Device Data)

When you or your customers interact with a store using an App, certain technical information may be collected automatically:

Merchants are responsible for ensuring that their own store cookie banners and privacy notices cover the use of cookies and similar technologies related to the Apps on their storefronts, as required by laws such as GDPR and ePrivacy rules.

4. How We Use Personal Information

UpRevApps uses personal information processed through the Apps for the following purposes:

Where permitted by law, UpRevApps may also use merchant contact details to send information about updates, new features, or related services, subject to applicable marketing and anti-spam rules.

5. Legal Bases for Processing (EEA, UK, and Similar Jurisdictions)

Where the General Data Protection Regulation (GDPR), the UK GDPR, or similar laws apply, UpRevApps relies on the following legal bases for processing personal data:

Merchants are responsible for ensuring they have an appropriate legal basis to share customer data with UpRevApps and to use the Apps in their own stores.

6. How We Share Personal Information

UpRevApps does not sell or rent personal information processed through the Apps. Personal information may be disclosed only in the following circumstances:

Any third party that processes personal information on UpRevApps's behalf will be bound by contractual obligations to protect that information and to process it only according to UpRevApps's documented instructions and applicable law.

7. International Data Transfers

Because Shopify and many cloud infrastructure providers operate globally, personal information processed through the Apps may be transferred to and stored in countries other than the one where the merchant or data subject is located, including Canada, the United States, and other jurisdictions. Where required, appropriate safeguards such as standard contractual clauses or equivalent transfer mechanisms will be used to protect personal information when it is transferred internationally.

Merchants remain responsible for ensuring their use of the Apps is compatible with any cross-border data transfer requirements that apply to their stores.

8. Data Retention

UpRevApps retains personal information for as long as necessary to provide the Apps, fulfil the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce agreements. The specific retention period may vary depending on the type of information and the context in which it was collected, but it is guided by principles of data minimization and storage limitation.

When a merchant uninstalls an App, UpRevApps will remove or anonymize personal information associated with that store within a reasonable period, except where a longer retention period is required by law or necessary to protect UpRevApps's legitimate interests (for example, to address outstanding support issues, prevent fraud, or maintain necessary logs).

9. Security

UpRevApps uses appropriate technical and organizational measures designed to protect personal information processed through the Apps against unauthorized access, loss, misuse, alteration, or destruction. These measures may include access controls, encryption in transit and at rest where appropriate, monitoring, and regular review of systems and practices.

No method of transmission over the internet or method of electronic storage is completely secure, and UpRevApps cannot guarantee absolute security; merchants should also take steps to secure their Shopify stores, accounts, and devices.

10. AI and Automated Decision-Making

Shopify has introduced stricter requirements on how partners and apps can use merchant and customer data in connection with artificial intelligence and machine learning, including prohibitions on using such data for model training without explicit merchant consent. UpRevApps complies with these requirements and, where the Apps include AI-powered features, will:

Merchants should review their own obligations under Shopify's Partner and API terms and ensure that any AI-related use of data through their stores is disclosed in their store privacy policies and customer notices.

11. Merchant Responsibilities

Merchants remain responsible for their own privacy and data protection compliance when using the Apps. This includes:

12. Your Privacy Rights

Depending on where you are located, you may have certain rights in relation to your personal information under laws such as the GDPR, UK GDPR, the California Consumer Privacy Act (as amended by the CPRA), and other regional privacy laws. These may include rights to:

If you are a merchant or an App user and wish to exercise these rights in relation to data processed by UpRevApps, you can contact UpRevApps using the contact details below. For end customers of a merchant's store, requests should generally be directed to the merchant, which controls the customer data; UpRevApps will assist merchants in responding to such requests as required by law and by its agreements with merchants.

You also have the right to lodge a complaint with a supervisory authority. If you are located in Lithuania, the relevant authority is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt). If you are located in another EEA member state or the UK, you may contact the supervisory authority in your country of residence.

13. Children's Privacy

The Apps are intended for use by merchants and are not directed to children under the age of 13 (or other age defined by local law for children's privacy). UpRevApps does not knowingly collect personal information directly from children through the Apps.

Merchants remain responsible for configuring and using the Apps in a manner that complies with children's privacy laws applicable to their stores and for avoiding the collection of children's data through the Apps unless they have established a lawful basis and appropriate safeguards.

14. Changes to This Privacy Policy

UpRevApps may update this Privacy Policy from time to time, for example to reflect changes to the Apps, to Shopify's platform rules, or to applicable privacy laws and guidance. When material changes are made, UpRevApps will update the "Effective date" at the top of this page and may provide additional notice as required by law or Shopify's requirements.

Merchants are encouraged to review this Privacy Policy periodically to stay informed about how personal information is processed through the Apps.

15. Contact Information

If you have questions, concerns, or complaints about this Privacy Policy or UpRevApps's data practices, or if you wish to exercise your privacy rights, you can contact UpRevApps at:

Merchants may also have additional contact details and terms directly in their agreements or invoices with UpRevApps, which should be read together with this Privacy Policy where applicable.

UpRevApps is not affiliated with, endorsed by, or sponsored by Shopify Inc. Shopify® is a registered trademark of Shopify Inc.