Llama Upsells Privacy Policy

Llama Upsells "the App" provides a slide cart drawer, upsells, gifts, and tier and shipping discounts "the Service" to merchants who use Shopify to power their stores. Llama Commerce LLC builds and runs the App. The Shopify App Store lists it as Llama: Cart, Gifts, Discounts. See the App Store listing.

This Privacy Policy describes how personal information is collected, used, and shared when you install or use the App in connection with your Shopify-supported store.

For data about your store and its staff, we are the controller. For data about your customers ("shoppers"), you are the controller and we process it on your behalf, as our Data Processing Addendum sets out. You are responsible for telling your shoppers about the App in your own privacy notice.

This policy covers the App only. It does not cover Shopify, which has its own privacy policy, other apps you install, or our website and client services. This policy is a notice. It is not a contract and gives no warranty.

When you install the App, we are automatically able to access certain types of information from your Shopify account:

Customers

Customer IDs, tags, and markets, to choose which offers a shopper sees. The App's access also covers customer names, emails, phone numbers, and addresses. The App uses the country, and in the storefront the city, to apply your offer rules in the shopper's browser or inside Shopify. Storefront code also includes a logged-in shopper's email in the offer data it builds in the browser. We do not store customer details.

Orders

Orders from the last 60 days, and new and edited orders. We keep only orders that contain an item the App added: the order ID, order number, subtotal, currency, date, the items the App added, and the campaign IDs. We use them for your analytics and for plan and usage counts. These records hold no shopper name, email, phone number, address, or customer ID.

Products, collections, and listings

To show offers. We store the product and variant IDs that you choose, in your settings.

Discounts

To create the discounts that you set up in the App and to check discount codes that shoppers enter.

Shopify Functions

To run your discount and cart validation rules inside Shopify.

Online Store

To check that the App's blocks and app embed are in your theme.

Custom data

To save the App's settings, translations, and currency rates in your store, as metafields and a metaobject.

Store and staff information

The store's name, email, phone number, and city, region, and country. The name and email of each staff member who opens the App. We use them to run, support, and bill your account.

Other store settings

Checkout branding, languages, locations, Markets settings, product publications, product tags, and selling plans, to show and target offers.

Additionally, we collect the following types of personal information from you and/or your customers once you have installed the App:

• Information about you and others who may access the App on behalf of your store, such as name, email address, Shopify staff ID, language, and the messages and feedback you send us.
• Information about individuals who visit your store, such as the country, product, collection, and variant IDs, cart subtotal, discount codes, and, for a logged-in shopper, the customer ID. The App's storefront, checkout, and post-purchase parts send this to our servers with your store domain.
• Campaign (UTM and ref) parameters, offer markers, and gift messages that the App saves in the shopper's cart. Shopify stores them.

We collect personal information directly from the relevant individual, through your Shopify account, or using the following technologies:

Cookies

The App's storefront, checkout, and post-purchase parts set no cookies. The App's admin uses browser storage. The analytics, support chat, and error-monitoring tools in the admin may set their own cookies.

Log files

Our servers and our hosting provider log requests. Logs can include the URL, the IP address, the browser type, and the date and time. When a webhook fails its signature check, our server may also log the request's headers and body. Error reports can include the IP address and the browser type. For some stores, a troubleshooting log records the cart contents, including cart attributes and the cart note, when a cart becomes empty.

Web beacons, tags, and pixels

The App does not use them in your storefront, checkout, or post-purchase pages.

We use the personal information we collect from you and your customers in order to provide the Service and to operate the App. Additionally, we use this personal information to:

• Communicate with you and give you support
• Bill you through Shopify and count usage against your plan
• Show you analytics about your campaigns
• Find and fix errors and protect the App
• Optimize or improve the App
• Keep records of our merchants
• Provide you with information relating to our products or services
• Comply with the law

We share personal information with Shopify, the platform the App runs on, and with service providers that help us run the App:

Hosting, database, cache, and message queue

Run the App and store its data.

Error monitoring

Receives error reports.

Customer support

Receives staff IDs, names, and emails, and the store's name, email, domain, and plan.

CRM

Receives store and staff contact details, the store's location and phone number, and the plan.

Billing

Receives the store ID, domain, name, and email, and an access credential for the store's Shopify API.

Analytics

Receives staff IDs, emails, and first names. It runs in the admin only.

Team notifications

Receive install and uninstall notices with store and staff contact details.

Fonts and videos in the admin

Their hosts receive the staff member's browser requests.

We do not sell personal information. We do not share it for cross-context behavioral advertising.

We may share personal information as part of a merger, sale, or other transfer of our business.

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

Depending on where you live, you may have the right to access personal information we hold about you and to ask that it be corrected, updated, or deleted. You may have other rights under applicable law, such as the right to object to processing based on our legitimate interests. If you would like to exercise a right, please contact us through the contact information below.

We may verify your identity before we act on a request. We may decline a request where applicable law allows.

If you are a shopper, the merchant decides about your data. Contact the merchant first. If you contact us, we may pass your request to the merchant.

Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you, or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information may be transferred outside of Europe, including to the United States. You may also complain to your data protection authority.

We keep personal information while the App is installed and after you uninstall it, unless and until you ask us to delete it.

When you uninstall the App

• We delete the session records, with their access tokens
• We delete the store record, including its billing-provider token
• We delete the cart settings
• We mark the subscription as cancelled
• We set tier discounts and shipping discounts to inactive, and validations to draft
• A scheduled job deletes the store's campaigns

Records that stay after uninstall

These records stay in our database until you ask us to delete them: staff records, the install record, subscription records, order records and daily metrics, merchant settings other than cart settings and campaigns, and feedback records.

You may ask us to delete them. We handle deletion requests as required by applicable law.

Shopper requests from Shopify

The App acknowledges Shopify's customer data requests and customer redaction requests. Our records hold no shopper name, email, phone number, address, or customer ID. Order records keep the order ID.

Caches, logs, and providers

Caches hold data for a short time. Support messages, logs, and copies held by our service providers stay under each provider's own retention rules.

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons. The Last updated date at the top of this page shows the current version.

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at support@llamacommerce.io or by mail using the details provided below:

Llama Commerce LLC, 148 Lafayette St, 3rd Floor, New York, NY 10013, United States

The terms for using the App are in our Terms of Service.