Privacy Policy
Last updated: TODO
TODO: placeholder legal text – replace with the reviewed version before launch.
1. Controller
TODO: Company name, address, contact email (see Imprint).
2. What we process
- Account data: email address, name, hashed password, session data – to provide your MrUpsell account.
- Shop data: shop URL, platform, plugin/WordPress/PHP versions – to connect shops and provide updates.
- Aggregated statistics: impressions, accepted/declined offers, revenue totals per shop, rule and payment gateway. No end-customer personal data is transmitted to MrUpsell.
- Billing data: processed by Stripe (WooCommerce merchants) or Shopify (Shopify merchants). We store the Stripe customer ID, the payment method ID with card brand and last four digits, invoice IDs and monthly upsell revenue totals per shop.
3. Legal basis
Art. 6(1)(b) GDPR (contract), Art. 6(1)(f) GDPR (legitimate interest in security and abuse prevention), Art. 6(1)(c) GDPR (legal retention).
4. Processors
TODO: hosting provider (EU), Stripe Payments Europe Ltd., Resend (transactional email), Shopify International Ltd.
5. Retention
Account data until deletion of the account; aggregated statistics for 24 months; billing records per statutory retention periods.
6. Your rights
Access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with a supervisory authority.
7. Cookies
We only use strictly necessary session cookies for authentication. No tracking or advertising cookies.