Privacy policy

Last updated 25 August 2026

SellMate is a Shopify app that creates discounts and shows offers on your storefront. This page says what it stores, why it needs each thing, and how to have it removed.

What we store about your shop

• Your .myshopify.com domain and the access token Shopify issues at install.
• The offers and upsells you configure, and the Shopify discount ids they create.
• Impressions, clicks and conversions for each offer, so reporting can exist.
• A count of your monthly orders, used to apply your plan's limit.

What we store about your customers

When an order uses a SellMate discount, we record the order id, the discount that applied and the amount, so revenue can be attributed to the offer that earned it. Alongside it we store the buyer's Shopify customer id, email address and name, so you can see who redeemed an offer.

Those three fields are protected customer data under Shopify's rules. We do not sell them, share them with anyone, or use them for advertising or profiling. They are visible only to you, in your own admin.

We do not read orders that have no SellMate discount on them beyond counting them toward your plan's monthly limit.

What we never collect

• Payment details or card numbers. Billing is handled entirely by Shopify.
• Customer addresses, phone numbers or order contents.
• Anything about shoppers who did not buy.

How long we keep it

• Offers, upsells and their analytics: while the app is installed.
• Attributed orders and their customer fields: while the app is installed.
• Order counts used for plan limits: kept per month, pruned as they age out.

Uninstalling

When you uninstall, Shopify notifies us and your shop's data is removed. You do not need to ask.

Customer data requests

We implement Shopify's mandatory privacy webhooks:

• Customer data request — we return what we hold for that customer.
• Customer redact — we anonymise the customer id, email and name on their attributed orders. The order and its revenue stay, so your historical reporting does not silently change months later, but the person is no longer identifiable.
• Shop redact — everything belonging to the shop is deleted.

Subprocessors

• Shopify — the platform the app runs on and reads from.
• Amazon Web Services — hosting, in the United States.

No other third party receives your data.

Security

Traffic is served over HTTPS. Access tokens are stored server-side and never sent to the browser. The storefront widgets read only what they need to render an offer and never receive customer data.

Contact

Questions, or a request about data: support@thesellmate.com.