Privacy Policy — Order Editing Post Upsell Pro

Last updated: October 2026

Order Editing Post Upsell Pro ("the app") lets Shopify merchants offer their customers a way to edit an order after checkout, and shows optional upsell offers, surveys and banners. This policy explains what data the app handles and why.

Who is responsible

The merchant who installs the app is the controller of their customers' data. The app developer acts as a processor on the merchant's behalf. Contact: gmmr.mostakim@gmail.com.

Data the app handles

• Store data: shop domain, plan and settings you choose in the app.
• Order data: order number, line items, prices, shipping method and status — read and changed only to carry out an edit a customer or the merchant asked for.
• Customer data: name, email, phone and shipping address on the order, used so a customer can correct their own address or contact details, and so the merchant can review edits. Messages a customer sends through the Contact support block and survey answers (with the customer's email when available) are stored for the merchant.
• Address check (optional): if the merchant switches it on, the address a customer is editing is sent to Google's Address Validation service to check it, either with the merchant's own Google key or with ours. We keep only a count and the country of each paid check for the merchant's wallet history, not the address.
• Technical data: logs needed to run and secure the service.

How the data is used

Only to provide the features the merchant switched on: editing orders, showing offers, collecting survey answers and support messages, billing for the app plan, and keeping the service secure. We do not sell personal data and do not use it for advertising.

Sharing

Data is processed with Shopify (the platform), our hosting and database providers, Google (only for the optional address check), and an email provider used for app billing notices to the merchant. These providers act on our instructions. Data is shared with authorities only where the law requires it.

Retention and deletion

Data is kept while the app is installed. When a merchant uninstalls, the app stops accessing the store and, after Shopify's standard waiting period, all of that store's data is deleted automatically. When Shopify sends a customer data deletion request, that customer's stored details are removed or anonymised. Customer data requests are answered through the same Shopify process.

Security

Data is sent over HTTPS, access is limited to the app's servers, and secrets are stored outside the code. No system is perfectly secure, but we work to protect the data we hold.

Your rights

Customers should contact the store they ordered from to see, correct or delete their data. Merchants and customers can also write to gmmr.mostakim@gmail.com.

Changes

We may update this policy; the date above shows the latest version.