Privacy policy
Post Purchase Upsell Abakira shows a one-click offer after a buyer has paid and before their order confirmation, and adds the accepted item to the order they just placed.
What we access, and why
- Products — so the merchant can choose which product and variant an offer promotes. We never modify the catalogue.
What we store
We store the offer the merchant configured: a product variant, a discount, and the shop it belongs to.
We also store the merchant’s contact email and the language of their Shopify admin, both provided by Shopify. They are used to run the app and to send essential service messages — for example, to warn a merchant, in their own language, that they are approaching the limit of their free plan and that their offer will stop being shown. This is not marketing consent: we do not send promotional email on this basis. Both fields are deleted when the app is uninstalled.
We do not store buyer names, emails, phone numbers, addresses, payment details or cart contents. When an offer is accepted, the buyer’s browser asks Shopify to compute the change and asks our server to sign it. The signature is computed and returned; nothing about the buyer is written down.
Your card is never seen by us. Shopify charges the payment method already attached to the order, on its own infrastructure.
Who else sees this data
We use Vercel to run the app, Neon to store it, and Tawk.to for the support chat inside the merchant admin. Neither Vercel nor Neon is given buyer data, because we hold none.
The support chat loads only in the Shopify admin. It never runs on a storefront, and never on the post-purchase page: your buyers never encounter it. Tawk.to sees only what a merchant chooses to write to us.
What we never do
- We do not sell or share merchant or buyer data.
- We do not use buyer data for advertising or profiling.
- We show no third-party advertising in the post-purchase page. The only thing a buyer sees there is the merchant’s own offer.
- We do not track buyers across stores.
How it is protected
Data is encrypted in transit (HTTPS/TLS everywhere, including between the app and its database) and at rest by our database provider. The discount applied to an offer is re-read from our database and signed on our server: it can never be set by the buyer’s browser.
Deletion
When a merchant uninstalls the app, their offer stops being shown immediately. Shopify then sends us a shop redaction request 48 hours later, and we delete every record we hold for that shop. Merchants can also ask us to delete their data at any time.
Our agreement with merchants
We act as a data processor on behalf of the merchant, who remains the controller of their store’s data. Installing the app means accepting this policy, and it is the data protection agreement between us: we process only the data listed above, only for the purposes listed above, and we never use it for our own ends. If we ever need to process anything else, this page changes first, in the same commit as the code.