Privacy Policy

This Privacy Policy explains how Merchantwell (“Merchantwell,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when Shopify merchants use our websites and apps, including AOVLift Post Purchase Upsell (collectively, the “Services”), and when buyers interact with experiences powered by the Services.

1. Information we process

Merchant and account information

We process the merchant’s Shopify store domain, Shopify authentication and session information, authorized staff-account information supplied by Shopify, app configuration, funnel and offer settings, product and variant information, billing status, and communications sent to us.

Buyer and checkout information

To evaluate merchant-configured targeting rules and present post-purchase offers, AOVLift may process a Shopify customer identifier, customer tags, number of previous orders, purchased product and collection identifiers, order value, country, and checkout reference. Customer tags and previous-order count are evaluated temporarily for targeting and are not stored in AOVLift’s database. AOVLift does not request buyer names, email addresses, phone numbers, or postal addresses for this functionality.

Offer performance information

We record offer impressions, declines, acceptances, the funnel and offer shown, product or variant identifiers, product title, revenue attributed to an accepted offer, and an opaque checkout reference. These records enable merchant-facing analytics and are not used to build independent buyer profiles.

Website and technical information

Our infrastructure providers may process standard request information such as timestamps, IP addresses, browser or device information, and diagnostic logs to deliver and secure the Services. We use cookies and similar technologies only as necessary for authentication, security, and operation.

2. How we use information

• Provide, secure, maintain, and troubleshoot the Services.
• Apply merchant-configured funnel, product, country, order-value, tag, and customer-type rules.
• Display eligible offers and safely process accept or decline actions through Shopify.
• Synchronize product availability and protect buyers from unavailable offers.
• Provide merchants with offer and funnel analytics.
• Administer subscriptions, respond to support, comply with law, and prevent fraud or abuse.

We do not sell personal information, use buyer data for third-party advertising, or use it to make decisions that produce legal or similarly significant effects.

3. How we disclose information

We disclose information only as needed to operate the Services, including to Shopify, which provides the commerce platform, APIs, checkout, and billing services; Render, which provides production application hosting and managed database services; Namecheap, which provides business email services; professional advisers or authorities when required by law; and a successor in a merger, financing, acquisition, or sale subject to appropriate protections.

Service providers may process information only to provide their contracted services to us.

4. Retention and deletion

Customer tags and previous-order count used for targeting are discarded after the targeting decision. Merchant configuration and offer analytics are retained while needed to provide the Service. Shopify authentication sessions are removed when an app is uninstalled. Store-associated application data is permanently deleted when Shopify sends its mandatory shop-redaction request, except records we must retain for a limited period to comply with tax, accounting, fraud-prevention, or other legal obligations.

5. Security

We use administrative, technical, and organizational safeguards appropriate to the information we process. Information is encrypted in transit using HTTPS/TLS and encrypted at rest by our managed infrastructure providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

6. Privacy choices and requests

Buyers should submit access, correction, deletion, or other privacy requests to the Shopify merchant with whom they interacted. We assist merchants with verified requests and respond to Shopify’s mandatory customer-data and deletion webhooks. Merchants may request deletion of Service data or stop future collection by uninstalling the app, subject to legal retention requirements.

7. International processing

Information may be processed in the United States and other countries where Shopify or our service providers operate. Where required, we rely on contractual and other lawful transfer safeguards.

8. Children

The Services are intended for Shopify merchants and are not directed to children. We do not knowingly collect personal information from children independently of a merchant’s use of Shopify.

9. Changes to this policy

We may update this policy to reflect changes to the Services, law, or our practices. The date above shows when it was last updated. Material changes will be communicated as required by law.

10. Contact

For privacy questions, email support@merchantwell.com. Buyers should contact the merchant from whom they purchased first so the merchant can verify and route the request appropriately.