Privacy Policy
BubbleCrossSell — cross-selling application developed by ByteBubbles SL for Shopify merchants. Last updated: October 11, 2026.
1. Information we collect
When you install and use BubbleCrossSell, we collect the following information:
- Shop information: your shop name, domain and shop ID, required to operate the app for your store.
- Products you select to configure cross-sell offers: product names, IDs, prices, images, variants and attributes.
- Limited cart data needed to display offers on your storefront (we never collect payment card data).
- OAuth access tokens provided by Shopify, used to authenticate API requests on your behalf. These tokens are stored securely and never shared with third parties.
- Order data for statistics: to show you usage statistics for your cross-sell popups (impressions, sales attributed to the popup and their amount), we read limited order data — order ID, the order line items identified as originating from the popup via an internal flag, quantity, price and currency. We do not access customers' personal data (name, email, address or payment details) for this purpose. Access to order data requires Shopify's Protected Customer Data (PCD) approval.
2. How we use your information
We use your information solely to:
- Provide, operate and maintain the cross-sell functionality of the app.
- Create and manage offers and discounts for your store.
- Render offers on your storefront through the Theme App Extension.
- Improve the performance and reliability of the app.
- Generate and display usage statistics for your cross-sell popups (impressions and sales attributed to the popup). Order data is used solely to show you these statistics — never for advertising or profiling, and never shared with third parties.
We do not sell personal data and we do not use it for advertising purposes.
The merchant is the data controller of their store's data; BubbleCrossSell (ByteBubbles SL) acts as a data processor and processes that data solely on the merchant's behalf and instructions (showing them the statistics in their dashboard).
3. Data storage and security
Your data is stored on secure servers (PostgreSQL) with encryption in transit, access controls and restricted access limited to authorized personnel only.
4. Data retention and deletion
We retain your data while the app is installed on your store. When the app is uninstalled, your data (sessions and offers) is deleted automatically.
5. Third-party services
BubbleCrossSell is built on the Shopify platform. Shopify's privacy practices apply to data processed by Shopify itself. You can review them at https://www.shopify.com/legal/privacy.
6. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the date at the top of this page.