Privacy Policy

Introduction

CodeQubex ("we," "our," or "us") operates UpsellMax, a Shopify application that helps merchants create upsell and cross-sell offers. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application.

By installing or using UpsellMax, you agree to the collection and use of information in accordance with this Privacy Policy.

Information We Collect

1. Information from Shopify

When you install UpsellMax, we collect the following information from your Shopify store:

Store Information

• Store name and domain
• Store owner email address
• Store timezone and currency
• Store plan and billing information

Product Information

• Product titles, descriptions, images, and prices
• Product variants and inventory levels
• Collections and product categories

Customer Information

• Customer names and email addresses
• Order history and purchase behavior
• Customer segments and tags
• Cart and checkout data

Order Information

• Order details including products purchased
• Order totals and payment status
• Shipping information
• Discount codes applied

Analytics Data

• Page views and click events
• Conversion data
• A/B test results
• Revenue attribution metrics

2. Information You Provide

Account Settings

• Configuration preferences for offers and funnels
• Customization settings for widgets and layouts
• A/B test configurations
• Email notification preferences

3. Automatically Collected Information

Usage Data

• IP addresses
• Browser type and version
• Device information
• Pages visited within the app
• Time spent using features
• Error logs and diagnostic data

Cookies and Tracking

• Session cookies for authentication
• Preference cookies for settings
• Analytics cookies for performance monitoring

How We Use Your Information

We use the collected information for the following purposes:

App Functionality

• Display upsell and cross-sell offers to your customers
• Generate product recommendations
• Create and manage conversion funnels
• Process post-purchase upsells
• Customize thank you pages

Analytics and Optimization

• Track offer performance and conversion rates
• Run A/B tests and statistical analysis
• Generate revenue attribution reports
• Provide analytics dashboards

Customer Segmentation

• Create targeted customer segments
• Personalize product recommendations
• Apply frequency capping rules

Communication

• Send app updates and feature announcements
• Provide customer support
• Send billing and subscription notifications

Compliance and Security

• Prevent fraud and abuse
• Comply with legal obligations
• Enforce our Terms of Service
• Maintain security and integrity

Data Sharing and Disclosure

Third-Party Service Providers

We share your information with third-party service providers who perform services on our behalf:

Infrastructure Providers

• MongoDB Atlas (database hosting)
• Vercel/AWS (application hosting)
• Cloudflare (CDN and security)

Analytics Services

• Sentry (error monitoring)
• Google Analytics (usage analytics)

Payment Processing

• Shopify Billing API (subscription management)

These service providers have access to your information only to perform specific tasks on our behalf and are obligated to protect your information.

Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Legal process or government requests
• Enforcement of our Terms of Service
• Protection of our rights, property, or safety
• Prevention of fraud or security issues

Business Transfers

If CodeQubex is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different Privacy Policy.

We Do NOT

• Sell your personal information to third parties
• Share your customer data with competitors
• Use your data for advertising purposes
• Access your store without permission

Data Retention

We retain your information for as long as your account is active or as needed to provide services. Specifically:

Active Accounts

• Store and configuration data: Duration of subscription
• Analytics data: 2 years from creation
• Customer data: Duration of subscription plus 90 days

Deleted Accounts

• Most data is deleted within 30 days of account deletion
• Aggregated analytics (non-identifiable): Retained for business analysis
• Legal compliance data: Retained as required by law

You can request deletion at any time by contacting support@codequbex.com.

Data Security

We implement appropriate technical and organizational measures to protect your information:

Technical Measures

• Encryption in transit (TLS/SSL)
• Encryption at rest for databases
• Secure authentication mechanisms
• Regular security audits
• Penetration testing

Organizational Measures

• Access controls and role-based permissions
• Employee training on data protection
• Incident response procedures
• Regular backups

Note: No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Your Rights and Choices

Depending on your location, you may have the following rights:

Access and Portability

• Request a copy of your data
• Export your configuration and analytics

Correction

• Update inaccurate information
• Modify app settings

Deletion

• Request deletion of your data
• Uninstall the app to stop data collection

Restriction

• Limit how we use your data
• Opt-out of marketing communications

Objection

• Object to certain data processing activities

To exercise these rights, contact us at support@codequbex.com.

Cookies and Tracking Technologies

UpsellMax uses cookies and similar tracking technologies:

Essential Cookies

• Authentication and session management (Required)

Functional Cookies

• Remember your preferences and settings (Optional)

Analytics Cookies

• Track app usage and performance (Optional)

You can control cookies through your browser settings. Disabling essential cookies may affect app functionality.

International Data Transfers

Your information may be transferred to and maintained on servers located outside your country of residence. We ensure appropriate safeguards are in place through:

• Standard contractual clauses
• Adequacy decisions
• Privacy Shield frameworks (where applicable)

Children's Privacy

UpsellMax is not intended for individuals under 16 years of age. We do not knowingly collect information from children. If you become aware that a child has provided us with personal information, please contact us.

GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under GDPR:

Legal Basis for Processing

• Contract performance (providing app services)
• Legitimate interests (improving our app)
• Legal compliance (tax and accounting)
• Consent (marketing communications)

Data Controller

CodeQubex is the data controller for your information.

Data Protection Officer

For GDPR-related inquiries: privacy@codequbex.com

CCPA Compliance (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

Right to Know

• Categories of data collected
• Sources of data
• Business purposes for collection

Right to Delete

Request deletion of your personal information

Right to Opt-Out

We do not sell personal information

Non-Discrimination

We will not discriminate for exercising your rights

To exercise CCPA rights: support@codequbex.com

Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. For material changes, we will:

• Notify you via email
• Display a prominent notice in the app
• Require re-acceptance if legally required

Continued use of UpsellMax after changes constitutes acceptance of the updated policy.

Contact Us

Shopify-Specific Information

UpsellMax is a Shopify App and complies with Shopify's API Terms of Service and Partner Program Agreement.

Shopify Data Access

We access your Shopify store data only through authorized API calls with permissions you grant during installation.

Shopify's Role

Shopify may also collect and use your information as described in their Privacy Policy: shopify.com/legal/privacy

Consent

By using UpsellMax, you consent to this Privacy Policy and agree to its terms.

Last Updated: May 20, 2026 · Version: 1.0