Privacy Policy
Last updated: August 7, 2026
UpsellAdvisor (“we”, “us”) provides analytics and growth recommendations to e-commerce merchants. This policy explains what data we access, how we use and secure it, who we share it with, and how you can have it deleted. By connecting your store to UpsellAdvisor, you agree to this policy.
1. Data we access and collect
We only access data through official, permissioned platform APIs (e.g. Shopify, WooCommerce) that you explicitly authorize. We never scrape. We access and store:
- Store data: your products, orders, inventory levels, and basic store settings, used to compute analytics and recommendations. Depending on your platform and the permissions you grant, order records may include a customer's email address; we do not request customer data we do not need.
- Store connection credentials: your API access token or keys, stored encrypted (see Security). These are used only to sync your store and are never shown to you again or sent to your browser.
- Account data: your name and email address, used to create and secure your account (via Google sign-in or email link).
- Billing data: if you subscribe, payments are processed by Stripe. We do not store your full card details.
- Usage analytics: first-party, privacy-preserving usage events tied to a random session identifier. We do not store IP addresses or precise location.
2. How we use data
- To provide the service: score product and store health, detect revenue leaks, mine cross-sell/bundle opportunities, forecast demand, and generate recommendations.
- To operate your account, provide support, and process billing.
- To secure the service and prevent abuse.
We do not sell your data, and we do not use it for advertising.
3. AI processing
Some features (e.g. growth plans, social posts, and campaign suggestions) send product content — such as titles, descriptions, product images, and computed metrics — to a third-party AI provider to generate that content on your behalf. We do not send your customers’ personal information to the AI provider. AI outputs are estimates and suggestions, not guarantees.
4. Aggregated benchmarks
If peer benchmarking is enabled, we may compute anonymized, aggregate statistics across many stores (for example, the median checkout-abandonment rate for a category and size band). These aggregates are computed only when a minimum number of distinct stores exists, contain no individual store’s data, and cannot be traced back to any single merchant.
5. External market data
Optional market-intelligence features query licensed or official third-party sources (such as ad libraries and marketplace APIs) about public products and market activity. When you use these, we send only your search term — never your customers’ data. Figures returned are modeled estimates or platform-reported counts and are labelled as such.
6. Security
- Store credentials/tokens are encrypted at rest with AES-256-GCM and are never logged or returned to the browser.
- Data is transmitted over TLS.
- Each merchant's data is isolated by a tenant-scoped data layer, so one account cannot access another's data.
- We request read-only scopes only; we never modify your store.
7. Data retention and deletion
We retain your store data only while your store is connected. When you disconnect your store or uninstall the app, we delete the associated store data and encrypted credentials. You may also request deletion of your account and data at any time by contacting us. If required by our platform partners, we honor mandatory data-deletion and data-access requests for you and your customers.
8. Your rights
Depending on your location (e.g. GDPR in the EU/UK, CCPA in California), you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. To exercise these rights, contact us at the address below and we will respond within the timeframe required by law.
9. International transfers
We and our providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards for such transfers.
10. Children
UpsellAdvisor is a business tool and is not directed to individuals under 16. We do not knowingly collect their data.
11. Changes
We may update this policy from time to time. Material changes will be reflected by updating the date above and, where appropriate, by notifying you.
12. Contact
Questions or requests: privacy@upselladvisor.com.