Privacy Policy
Last updated: 2026-07-30
1. Who we are
Boosting Sales ("we", "us") provides a behavioral optimization SaaS for e-commerce stores, including a Shopify embedded app. Contact: privacy@boosting-sales.com.
2. Data we process from your Shopify store
- Shop metadata: shop domain, installed scopes, plan, owner email.
- Catalog data: products, variants, images, prices, stock — to display and optimize listings.
- Order data: order ID, totals, status — used only for analytics and merchant dashboards.
- Customer data: email, phone, name, address are processed only when needed to fulfill an order placed through the Boosting Sales storefront.
3. Behavioral data (SDK)
Our SDK collects anonymous behavioral signals (anonymous visitor hash, clicks, scroll, detected profile) via localStorage and sessionStorage to run A/B tests on your store. No personally identifiable information is collected from visitors via the SDK.
4. Data subprocessors
- Supabase (database, authentication, storage) — EU region.
- Cloudflare (edge runtime, CDN).
- Shopify (merchant authentication and data source).
5. Data retention
We keep merchant data while the app is installed. After uninstall, access tokens are deleted immediately; remaining data is purged within 30 days, or sooner upon request.
6. GDPR & Shopify compliance
We comply with Shopify's mandatory GDPR webhooks:
customers/data_request— we provide the requested customer data within 30 days.customers/redact— customer data is erased within 30 days of request.shop/redact— all shop data is erased within 90 days of app uninstall.
EU residents have the right to access, rectify, erase, restrict, port, and object. Requests: privacy@boosting-sales.com.
7. Security
Data is encrypted in transit (TLS 1.2+) and at rest. Access is restricted via row-level security and least-privilege service roles. We never share or sell merchant data.
8. Changes
We may update this policy. Material changes are communicated via the app dashboard and email to the merchant account owner.