Privacy Policy
Last updated: 5 November 2025
This Privacy Policy describes how UpsellShark ("we", "us", or "our") — a product and website operated by the organization SafeSale — collects, uses, discloses, and protects information when you visit our website (upsellshark.com) or use our Shopify app "Background Color Editor for Products" (the "App").
Information we collect
From merchants using our App
- Store Information: Shopify store domain, store name and store owner email address.
- Product Data: Product images and metadata necessary to apply background color filtering.
- App Settings: Your chosen background colors, filtering preferences and enabled page types.
- Usage Data: How you use the App, including features accessed and settings modified.
- Installation Data: Date and time of App installation and uninstallation.
From website visitors
- Technical Information: IP address, browser type, device type and operating system.
- Usage Information: Pages viewed, time spent on pages and navigation patterns.
- Contact Information: Name and email address if you contact us via the website.
How we use your information
- Provide and maintain the App functionality.
- Process product images to apply your chosen background colors.
- Respond to support requests and communications.
- Improve and optimize our App and services.
- Comply with legal obligations.
- Detect and prevent fraud or abuse.
Data storage & security
- Database: App settings and shop information are stored in a secure PostgreSQL database hosted by Supabase.
- Hosting: Our App and website are hosted on Vercel with industry-standard security measures.
- Encryption: All data transmission is encrypted using SSL/TLS protocols.
- Access control: Database access is restricted using Row Level Security (RLS) policies.
- Image processing: Product images are processed client-side in the browser; we do not permanently store your product images on our servers.
Data sharing
We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:
- Service providers: With trusted third-party services (for example Supabase for database, Vercel for hosting) that help us operate the App.
- Legal requirements: When required by law, court order, or governmental authority.
- Business transfers: In connection with a merger, acquisition or sale of assets — users will be notified.
Your data rights (GDPR & CCPA)
You have the right to:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your personal data ("right to be forgotten").
- Data portability: Request your data in a machine-readable format.
- Opt-out: Unsubscribe from marketing communications.
- Withdraw consent: Withdraw consent for data processing at any time.
To exercise these rights, contact us at support@upsellshark.com.
Data retention
- Active merchants: We retain your data while you have our App installed.
- After uninstallation: Settings and shop data are deleted within 48 hours of App uninstallation.
- Backups: Backup copies may be retained for up to 30 days for disaster recovery purposes.
- Legal requirements: Some data may be retained longer if required by law.
Shopify customer data
If a customer requests their data from your store:
- We will provide any data we have about that customer within 30 days.
- We only process customer data as necessary to provide App functionality.
- We do not collect or store end-customer personal information beyond what is required for the App.
If a customer requests deletion, we will delete any customer-related data within 30 days. Merchants can also request customer data deletion by contacting us at support@upsellshark.com.
Cookies & tracking
Our website uses:
- Essential cookies: Required for website functionality.
- Analytics cookies: To understand how visitors use our website (e.g. Google Analytics).
- Preference cookies: To remember your settings and preferences.
You can control cookies through your browser settings. Disabling cookies may limit website functionality.
Third-party services
We use the following third-party services to operate the App and website. Each service has its own privacy policy:
- Shopify — App platform and merchant authentication.
- Vercel — Application hosting and delivery.
- Supabase — Database storage.
- Cloudflare — Content delivery and security.
Children's privacy
Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us at support@upsellshark.com.
International transfers
Your information may be transferred to and processed in countries other than your own. We implement appropriate safeguards to protect your data in compliance with applicable data protection laws.
Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website, updating the "Last updated" date above, and — for significant changes — sending an email notification.
Contact us
For questions, concerns, or to exercise your data rights, contact us at:
- Organization: SafeSale (operating as UpsellShark)
- Email: support@upsellshark.com
- Website: https://upsellshark.com
Compliance
This Privacy Policy is intended to comply with the following laws and requirements: GDPR, CCPA, Shopify App Store Requirements and PIPEDA (Canada).