Privacy policy
This policy explains what Appal Post Purchase & Upsell stores, why it stores it, and how a merchant or a buyer can have it removed. It applies to the Shopify app and to the two things a buyer can see from it: the post-purchase offer page and the optional thank you page survey. Last updated 18 October 2026.
What the app stores
When a merchant installs the app, Shopify issues an access token that is stored so the app can read the store data it needs. The app also stores the funnels, offers, surveys and settings the merchant creates.
When a buyer reaches the post-purchase page, the app records one row per offer that was shown, accepted or declined. That row holds the offer, the amount, the currency, the checkout token of the order, and, so the offer can greet the buyer by name and the merchant can recognise the order in the Order browser, the buyer's first name, the order number and the shipping country. It also holds the buyer's Shopify customer ID, so a funnel set to show once per customer is not shown to the same buyer twice. If the merchant runs a thank you page survey, the buyer's answer is stored against that order.
The app does not store payment details, card numbers, full addresses, email addresses or phone numbers. It does not track buyers across stores and it does not build buyer profiles.
What Shopify data the app reads
The app reads products, orders, and the buyer's first name, customer tags and order count. Products are needed to build offers and to show the correct title, image and price. Orders are needed to match an offer to the order it belongs to and to report results back to the merchant. Customer tags and order count are only used to decide whether a funnel or survey applies to the buyer, and are not stored.
Who the data is shared with
Nobody. The data is not sold, rented or shared with advertisers or data brokers. It is stored on infrastructure operated by Railway in the European Union and is reachable only by the app and its operator.
How long it is kept
Merchant configuration and offer records are kept while the app is installed so the merchant keeps their history and reporting. When the app is uninstalled, Shopify sends a shop redact request 48 hours later and everything stored for that store is deleted, including the access token.
Buyer requests
The app implements Shopify's privacy webhooks. When a buyer asks a merchant for their data, the app assembles everything it holds for that buyer's orders. When a buyer asks to be erased, the app removes the name, country and customer ID from the offer records and deletes any survey answers tied to those orders. Both are handled within the 30 day window Shopify allows.
Contact
Write to silas@okayscale.dk for anything about this policy, including access, correction and deletion requests.