Orbits FreeShipping Upsell App

Privacy Policy

How the app collects, uses, shares and protects information.

Effective date: June 21, 2026 · Last updated: June 21, 2026

This Privacy Policy explains how OrbitsDev (“we”, “us”, “our”), the developer of the Shopify app Orbits FreeShipping Upsell App (the “App”), collects, uses, stores, and protects information when a merchant (“you”, “Merchant”) installs and uses the App, and when a Merchant’s customers (“Customers”) interact with the free shipping bar and related features on the Merchant’s online store.

Our role. For information about the Merchant’s store and account, we act as a data controller. For storefront analytics and order data that the App processes on the Merchant’s behalf, the Merchant is the data controller and we act as a data processor, processing that information only to provide the App. The App does not collect Customer names, emails, addresses, or payment details.

1. Information we collect

a. Store & Merchant information

When you install the App, with your authorization through Shopify we receive and store information such as:

Your store’s myshopify domain, store name, and Shopify shop ID, plus basic store settings (e.g. time zone, currency and money format, country).
Store owner / contact details made available by Shopify, such as name and email address, and your Shopify plan name.
A Shopify API access token used to operate the App on your behalf.
App configuration you create: free shipping bar goals, messages, currency, designs/templates, placement and targeting rules, upsell selections, and any custom CSS/JavaScript or cart-drawer settings you enter in the App’s Settings.

b. Storefront analytics (collected to measure performance)

When the bar is shown on your storefront, the App records non-identifying interaction events so you can see how it performs, such as:

Event type (for example: bar shown, progress, goal reached, upsell view/click).
A randomly generated visitor ID and session ID stored in the browser’s local storage.
Cart token, cart value, goal amount, progress percentage, page type, and selected variant ID.

These identifiers are not designed to identify individuals. The App does not collect shopper names, email addresses, payment details, or browsing history outside the Merchant’s store.

c. Order data (for performance reporting)

If enabled, the App receives order webhooks from Shopify to attribute results. We store order-level data only — order ID, cart/checkout token, order total, shipping amount, currency, line-item count, and whether the shipping goal was met. We do not store customer names, addresses, emails, or payment information.

d. Technical & usage information

To operate, secure, and improve the App we may process limited technical information such as IP address, browser/device type, and basic usage events (for example, that the bar was loaded or an upsell was clicked). We do not use this information for advertising.

2. How we use information

To provide and operate the App — display the free shipping bar and upsell on your storefront and manage your settings.
To sync your configuration to your store (via an app-owned metafield) so the storefront can render it.
To produce engagement and performance analytics in your admin dashboard.
To respond to support requests and communicate with you about the App.
To monitor, troubleshoot, secure, and improve the App and prevent abuse.
To comply with legal obligations.

We do not sell personal information, and we do not use storefront or order data for our own marketing.

3. Legal bases (where applicable, e.g. EEA/UK)

Where data protection law requires a legal basis, we rely on: performance of a contract (providing the App); our legitimate interests (securing and improving the App); your consent where required; and compliance with legal obligations. For data processed on the Merchant’s behalf, the Merchant is responsible for establishing the appropriate legal basis.

Recipient	Purpose
Shopify	The App runs on Shopify and exchanges data with Shopify APIs, metafields, and webhooks to operate.
Hosting & database provider — [hosting/database provider, region]	To host the App’s servers and store App data.
Service providers / subprocessors — [list any, e.g. email or error-monitoring]	To help us operate and support the App, under confidentiality obligations.
Legal / safety	When required by law, or to protect rights, safety, and the integrity of the App.

We may also share information in connection with a business transfer (e.g. merger or acquisition), subject to this Policy.

5. Data retention & deletion

We retain App configuration and analytics data while the App is installed and as needed to provide the service.
When you uninstall the App, your store record is marked uninstalled and the access token is no longer used.
On a Shopify shop/redact request (sent about 48 hours after uninstall), we delete the store’s records and bar configuration from our database, except where retention is required by law.
We honor Shopify’s mandatory privacy requests, including customers/data_request, customers/redact, and shop/redact webhooks. Because the App does not store Customer personal data, there is typically none to return or erase for customer requests.

6. Security

We use technical and organizational measures appropriate to the risk, including encryption in transit (HTTPS), access controls, and secure storage of access tokens. No method of transmission or storage is completely secure, but we work to protect your information and to address vulnerabilities promptly.

7. Cookies & local storage

On the storefront, the App stores a randomly generated visitor ID and session ID in the browser’s local storage to measure how the bar performs. The App’s admin interface may use local storage to remember interface state. The App does not set advertising or cross-site tracking cookies. Your store’s theme and Shopify may set their own cookies, which are governed by your and Shopify’s policies.

8. Your rights

Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal information, to object to processing, and to data portability.

Merchants: contact us using the details below to exercise your rights regarding store/account data.
Customers (shoppers): the Merchant whose store you interacted with is the controller of any data processed on their behalf — please contact that Merchant. You may also contact us and we will assist the Merchant in responding.

9. International data transfers

We may process and store information in [country/region of hosting] and other locations where we or our service providers operate. Where required, we use appropriate safeguards for international transfers.

10. Children

The App is intended for use by merchants and is not directed to children. We do not knowingly collect personal information from children under [16/13, per your jurisdiction].

11. Changes to this Policy

We may update this Policy from time to time. We will revise the “Last updated” date above and, where appropriate, provide additional notice. Continued use of the App after changes take effect constitutes acceptance of the updated Policy.

12. Contact us

If you have questions or requests regarding this Policy or your information, contact us at:

OrbitsDev
Email: orbitsdev07@gmail.com