Privacy Policy
Last updated 19 October 2026
The short version
- hoop Upsell Cross-sell Bundles lets you create upsell, cross-sell and bundle offers for your Shopify store. Your offers are saved in your own Shopify store as discounts, not in our database.
- We never collect data about your shoppers or customers. The offer blocks on your storefront never contact our servers, set no cookies and do no tracking.
- We keep the minimum needed to run the app: your store's address and name, encrypted access keys, your app settings, when you last opened the app, and feature ideas you post. Your store's record is deleted after you uninstall.
- No advertising, no selling or renting of data, and no use of your data to train AI models.
- Who we are
- What we collect
- What we don't collect
- How we use it
- Who we share it with
- How we protect it
- How long we keep it
- Your rights
- Where it is stored
- Children
- Changes
- Contact
1. Who we are
hoop Upsell Cross-sell Bundles ("the app") is a Shopify app made by Hoop Interactive LLC ("we", "us"). This policy covers the app, including its admin screens in Shopify, the blocks it adds to your storefront, and its servers. For the data described here, Hoop Interactive LLC, a Wyoming limited liability company at 30 N Gould St #20402, Sheridan, WY 82801, USA, is the data controller. Contact: hi@hoopinteractive.com.
This policy covers the app only. Our company website, hoopinteractive.com, has its own privacy policy; the app does not use the website's analytics or advertising cookies.
2. What we collect
The app is used by Shopify merchants ("you"). Here is everything it handles, and where each item lives.
| Data | Where it comes from | Why | Where it is kept |
|---|---|---|---|
| Your store's Shopify address (myshopify.com domain), store name and app installation ID | Shopify, when you open the app | To know which store is using the app | Our database |
| Shopify access keys | Shopify, when you open the app | To create, change, pause and delete your offers as discounts in your store, to save the copy of your offers that your storefront blocks show, and to show product names and pictures in the offer editor. The app asks Shopify for two permissions: write_discounts (manage the app's own discounts) and read_products (read your products, without storing them). Two more are optional and only asked for if you press Allow under the offer suggestions: read_orders (which products your orders from the last 60 days contain, and how many of each, to suggest products bought together) and unauthenticated_read_product_listings (Shopify's product recommendations). Neither reads names, emails, addresses or any other customer details, and the results are only kept in memory for 10 minutes. You can remove them in your Shopify admin at any time. The app can't read your customers. | Our database, encrypted |
| Your offers: their names, discount tiers and the products they apply to | You, in the app | To apply the discounts at checkout and show them on your storefront | Your Shopify store, as discounts and app data. Not in our database. |
| Product names and pictures for the products in your offers | Shopify | To show them in the offer editor | Not stored; read when needed |
| App settings: which tips and cards you have hidden, and your progress through the setup steps | You, in the app | To show the app the way you left it | Our database |
| When you last opened the app | The app | To know how many stores use the app, and to find stores that may need help getting started | Our database |
| Which other hoop apps your store has installed | Shopify, when you open the app | To show only the hoop apps you don't have yet | Not stored |
| Feature ideas and likes you post on the Feature requests page | You | To decide what to build. Other merchants see the idea but never your store name. | Our database |
| Your reasons for uninstalling, if you give them to Shopify | Shopify (Partner API), after you uninstall | To understand why merchants leave and improve the app | Our database |
| Server logs: requests to our servers, your store's address, and error details | Our servers | To keep the app running and secure, and to fix problems | Our hosting provider |
When you email us, we also have your email and whatever you write, which we use only to answer you.
3. What we don't collect
- Nothing about your shoppers or customers. The app reads no customer or order data from Shopify, and our database holds none.
- No tracking on your storefront. The offer blocks are drawn by your theme from data saved in your store. Their small script only sets the product form's quantity when a shopper picks a tier. They make no requests to our servers, set no cookies, save nothing in shoppers' browsers and use no analytics. Discounts are applied by Shopify at checkout, also without contacting our servers.
- No analytics or advertising trackers in the app's admin screens or on this website.
4. How we use it
Only to provide and support the app: saving your offers as discounts in your store, showing them on your storefront, answering your messages, understanding how the app is used (counts such as how many stores opened it this week), and improving the app. We do not sell, rent or trade any data, use it for advertising, or use it to train AI or machine learning models.
5. Who we share it with
We don't sell or share data with anyone for their own use. We use these service providers to run the app, and they only process data for us:
- Shopify: the platform the app runs on. Your offers are saved in your store with Shopify.
- Railway (Railway Corporation): hosts our servers, database and logs, in the United States.
- Our email provider: only for messages you send us.
We may also disclose data if the law requires it, or to a buyer of the app as part of a sale or merger, who would have to respect this policy.
6. How we protect it
- Shopify access keys are encrypted (AES-256-GCM) before they are stored.
- All traffic to and from our servers is encrypted (HTTPS).
- Requests from Shopify are checked to be genuine (signed session tokens and webhook signatures).
- Our own internal dashboard reads store records and usage counts through access keys that we store only as one-way hashes. Only the people who run the app can reach the database, and only to operate and support it.
No system is perfectly secure. If a breach ever affects your data, we will tell you and the relevant authorities as the law requires.
7. How long we keep it
- When you uninstall: right away, we delete the Shopify access keys. Shopify removes the app's discounts and the app data saved in your store along with the app.
- 48 hours after you uninstall, Shopify asks us to erase your store's data. We then delete your store's record, including its settings and when it last opened the app, and your likes. Feature ideas you posted stay on the board without any link to your store. Uninstall reasons are kept only in an anonymous form: the store's address is replaced by a one-way code, and its name and any comment are deleted. If you reinstall within those 48 hours, your store's data is kept.
- Server logs are kept by our hosting provider for a limited period and then deleted automatically.
- Emails are kept while needed to support you.
You can ask us to delete your data at any time by emailing hi@hoopinteractive.com.
8. Your rights
Depending on where you live (for example under the GDPR, the UK GDPR or California law), you can ask to see the data we hold about you, correct it, delete it, receive a copy, or object to how we use it. Email hi@hoopinteractive.com and we will reply within 30 days. We never discriminate against anyone for using these rights. You can also complain to your local data protection authority.
We act on Shopify's privacy requests automatically: requests about a shopper find no data, because we hold none, and a store's erasure request deletes its data as described above.
The legal basis for our processing is providing the service you asked for (contract), and our legitimate interest in keeping it secure, supporting you and improving it.
9. Where it is stored
Hoop Interactive LLC is based in the United States, and our servers and database are there too. If you are outside the United States, your data is transferred there, with the safeguards the law requires (such as the European Commission's Standard Contractual Clauses with our providers).
10. Children
The app is for businesses and is not meant for anyone under 16. We do not knowingly collect children's data.
11. Changes to this policy
If we change this policy, we will update the date at the top. For important changes, such as collecting new kinds of data, we will tell you in the app or by email before they take effect.
12. Contact
Hoop Interactive LLC
30 N Gould St #20402, Sheridan, WY 82801, USA
Email: hi@hoopinteractive.com