Privacy Policy — Upsify

Last Updated: October 22, 2025

Privacy Policy

Upsify ("we", "our", "us") is operated by KB Online Stores LLC. This Privacy Policy explains how we collect, use, and share personal information when you visit our website (https://upsify.app) or use our Shopify App ("Upsify App").

We comply with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Shopify's App Store requirements.

This Policy applies to:

Website visitors
Shopify merchants who install and use the Upsify App
End customers who interact with Upsify features on a merchant's store (for example, product upsells or shipping insurance coverage)

1. Definitions

Merchant: A Shopify store owner who installs or uses the Upsify App.
Customer: An end user who visits or makes a purchase from a merchant's store.
Personal Data: Any information relating to an identified or identifiable individual.
Processing: Any operation performed on Personal Data (such as collection, storage, use, disclosure, or deletion).
Services: The Upsify website, Upsify App, integrations, and related communications.
Service Providers: Third parties that process data on our behalf to support the Services.

2. Types of Data We Collect

2.1 From Merchants

We collect:

Store name, URL, and Shopify domain
Merchant name, email address, phone number
Billing information (via Shopify Payments or Stripe)
Shopify plan, store country, and currency
Product, order, and cart data related to upsell and insurance features
App configuration, usage logs, and feature interactions

2.2 From End Customers

When customers engage with Upsify-powered experiences on a merchant's store, we may collect:

Name, email, and phone number
Shipping address (used to confirm shipments and manage shipping insurance)
Order details such as product IDs, quantities, order total, and insured value
Payment status (via Shopify Payments or Stripe)
Insurance transaction data (policy reference, coverage amount, claim ID)

We collect this data to verify and process shipping insurance coverage and related claims.

2.3 From Website Visitors

IP address, browser type, operating system, device
Referring URLs, session duration, pages visited
Cookies, pixels, and analytics data (see Section 9)
Information submitted through contact forms or email

3. Use of Information

Provide, operate, and maintain the Upsify App and website
Enable merchants to configure and manage product upsells and insurance coverage
Process payments via Stripe and Shopify Payments
Facilitate insurance underwriting and claim handling through Online Shipping Insurance Services, Inc. DBA InsureShip
Provide support and respond to merchant inquiries
Verify claim requests using customer name, email, and shipping information
Process and manage shipping protection claims, refunds, reshipments, and cancellations
Send claim-related notifications via the merchant's SMTP provider (for example, Gmail)
Improve the app's functionality and user experience based on collected data
Prevent fraud and unauthorized use
Comply with legal and regulatory obligations
Conduct analytics, product development, and marketing (where permitted)

4. Service Providers

We use trusted third-party providers:

Purpose	Provider	Location
Hosting and infrastructure	Firebase (Google)	United States
App and platform integration	Shopify Inc.	Canada and United States
Payment processing	Stripe, Shopify Payments	United States
Analytics and performance	Google Analytics, Meta Pixel	United States
Communication and email	Google Workspace	United States

These providers are bound by confidentiality and data-processing agreements and may only use data to perform tasks on our behalf.

5. Sharing and Disclosure

Insurance Partner: With Online Shipping Insurance Services, Inc. (InsureShip) to manage underwriting, policy issuance, and claim handling.
Payment Processors: With Stripe and Shopify Payments to process secure transactions.
Service Providers: As listed above, for hosting, analytics, communications, support, and monitoring.
Legal Obligations: To comply with lawful requests, protect rights, or investigate fraud.
Business Transfers: In connection with mergers, acquisitions, or reorganization.

We do not sell Personal Data.

6. Data Retention

We retain Personal Data only as long as necessary for the purposes described or as required by law. Insurance-related records may be retained for up to seven (7) years to meet compliance and audit obligations.

7. Data Security

HTTPS / SSL encryption
Data encryption at rest and in transit
Access controls and multi-factor authentication
Regular vulnerability assessments and monitoring

No method of transmission is 100% secure; information is provided at your own risk.

8. International Data Transfers

Your data may be processed in countries other than your own (including the United States). When transferring data from the EU/UK, we rely on Standard Contractual Clauses (SCCs) or equivalent safeguards.

9. Cookies and Website Tracking

We use cookies, pixels, and similar technologies on both our website and app for authentication, analytics, personalization, security, and marketing (where permitted). Visitors can manage cookie preferences via browser settings or opt out of analytics (for example, the Google Analytics Opt-out).

Essential (login, security)
Functional (preferences)
Analytics (Google Analytics, Meta Pixel)
Marketing (retargeting ads)

10. Your Rights (GDPR)

If you are located in the EEA/UK/Switzerland, you have rights to access, rectify, delete, restrict, object, request portability, and withdraw consent. You may lodge a complaint with your local supervisory authority.

Contact: info@upsify.app

11. California Consumer Privacy Act (CCPA)

California residents have the right to know, delete, and opt out of sale or sharing of Personal Data and to be free from discrimination for exercising these rights. We do not sell Personal Data as defined by the CCPA. To exercise these rights, email info@upsify.app.

12. Children's Privacy

Our Services are not directed to individuals under 18, and we do not knowingly collect data from minors. If a child has provided information, contact us and we will promptly delete it.

13. Changes to This Policy

We may update this Policy from time to time. Any changes will be posted on this page with the revised "Last Updated" date. Continued use of our Services after changes indicates acceptance.

14. Contact Us

KB Online Stores LLC
30 N. Gould Street, Suite 6455
Sheridan, WY 82801, USA
Email: info@upsify.app