Visual Upsell Privacy Policy

Last updated: 8 October 2026

This policy explains what information the Visual Upsell by Amethyst app ("the App") collects when a merchant installs it on their Shopify store, how it is used, and how it is protected. The App is made by Amethyst Apps, an independent software developer based in the United Kingdom.

Who this applies to

The App is used by Shopify merchants. When a merchant installs the App, we process some information about their store, and some limited order information about their customers, on the merchant's behalf. For that customer information, the merchant is the data controller and we act as their data processor.

Information we collect

When you install the App, it accesses the following through Shopify's API:

Store information: your shop's name, domain, currency and plan, and the store owner's name and contact email. We use these to run the App, handle billing and send you emails about the App.
Products: titles, descriptions, product types, tags, vendors, prices, status and product images. These are used to find products that go well together.
Orders: which products were bought together in the same order, plus basic order details such as order number, totals and dates. This is used to recommend products that customers often buy together.
Storefront activity: anonymous counts of when the Complete the Set block is shown, clicked or used to add items to the cart. These events are not linked to any customer.

The App does not store customer names, email addresses, phone numbers, postal addresses, payment details or IP addresses. The storefront block does not set cookies or use browser storage.

How we use the information

To create product recommendations and show them in the Complete the Set block on your store.
To create and manage Buy Both & Save bundle discount codes in your Shopify admin, when you turn them on.
To show you analytics about how your recommendations perform.
To manage your subscription through Shopify's billing system.

We only use this information to provide the App to you. We do not sell it, share it for advertising, or use it to make decisions about individual customers.

Service providers

We use a small number of providers to run the App:

Shopify, the platform the App runs on, which also handles all billing.
Gadget (gadget.dev), which hosts the App and its database on Google Cloud.
OpenAI, which analyses product images and product details to suggest matching products. Only product information is sent; no customer or order information is sent to OpenAI.
Replicate, which analyses product images to work out which products look alike. Only product images are sent.
Resend, which delivers the emails the App sends you: a welcome email, a getting-started email and a check-in email.
Loops, which keeps our list of merchants who use our apps and may send occasional Amethyst Apps news and updates. It receives the store owner's name and contact email, the store's name and domain, and whether the App is installed.

Emails we send you

When you install the App we send a welcome email with setup steps to your store's contact email. About two hours later we send a short getting-started email, and about two weeks later a check-in email. These two use your store's activity in the App, such as how many pairings you have and how often Complete the Set has been shown, to show what is done and what is left, and the check-in may ask you to review the App. Both include an unsubscribe link. Unsubscribing also takes you off our Amethyst Apps email list. You can also email us to stop any of these emails. We never send emails to your customers.

Security

All data is sent over encrypted connections (HTTPS/TLS) and stored encrypted at rest. Access to the App's data is limited to the people who need it to support the App, and each store's data is kept separate from every other store's.

How long we keep information

Storefront analytics events are deleted after 13 months.
Order information is deleted after 2 years.
When you uninstall the App, Shopify notifies us 48 hours later and we delete all data held for your store, including products, orders, recommendations, bundle settings and analytics.
When Shopify sends us a customer data deletion request on your behalf, we delete that customer's orders from the App.
Your contact details stay on our merchant email list until you unsubscribe or ask us to remove them, even after you uninstall the App.

Your rights

If you are a merchant, you can ask us for a copy of the data we hold about your store, or ask us to correct or delete it, by emailing us. If you are a customer of a store that uses the App, please contact that store first; they can ask Shopify to send us a data request or deletion request, which we act on.

If you are in the UK or the European Economic Area, you also have the right to complain to your data protection authority. In the UK this is the Information Commissioner's Office (ico.org.uk).