Privacy Policy

Encore — UpSell post-purchase · Effective date: July 26, 2026

Encore — UpSell post-purchase (“Encore”, “the App”, “we”, “us”) is developed and operated by Trackwise Studio (trackwise.studio). This policy describes what information the App processes when a merchant installs it on their Shopify store, why we process it, and the choices available to merchants and their customers.

Information we collect

When a merchant installs Encore, we store:

• Store information — the store’s myshopify domain, an API access token issued by Shopify, store currency and primary domain. We never see the merchant’s Shopify password.
• App configuration — the offers, surveys and settings the merchant creates in the App.
• Order data — order identifiers and the products in recent orders, used to count monthly order volume (billing tiers), evaluate offer trigger rules and compute frequently-bought-together recommendations from aggregate co-occurrence. We do not store customer names, email addresses, shipping addresses or any payment details.
• Survey responses — the answer a customer chooses (e.g. an attribution channel, an NPS score, or free-text feedback), linked only to an order identifier.
• Offer analytics — anonymous events (impression, accepted, declined, clicked) linked to an offer and an order identifier.

How we use it

• To display upsell offers and surveys on the post-purchase, thank-you and order status pages.
• To compute the analytics shown in the merchant dashboard.
• To enforce the plan limits of our billing tiers.
• To write survey answers to order metafields in the merchant’s own store, at the merchant’s service.

We do not sell or rent any data, we do not use it for advertising, and we do not train AI models on it. Product recommendations are computed solely from the merchant’s own order history.

Customer consent

On the thank-you and order status pages the App reads Shopify’s Customer Privacy API. Offers are functional and always render, but a customer who has declined analytics processing generates no impression, click or accept analytics — those interactions never reach the merchant’s dashboard or CSV exports.

Where data is stored

Data is stored in a PostgreSQL database hosted on Railway (railway.com) in the EU-West region, encrypted in transit (TLS 1.2+) and at rest. Railway acts as our hosting subprocessor.

Retention and deletion

• Uninstall — access tokens are invalidated immediately when the App is uninstalled.
• Shop data erasure — 48 hours after uninstall, Shopify sends the mandatory shop/redact request and we permanently delete all data for that store.
• Customer erasure — when a customer requests deletion, Shopify sends customers/redact and we delete the survey responses and offer events linked to that customer’s orders. customers/data_request requests are honored through the merchant.

Merchant responsibilities

Merchants remain the data controllers for their customers’ data. If you use Encore’s surveys, make sure your own store privacy policy covers post-purchase feedback collection. The processing terms between us are set out in our Terms of Service & Data Processing Addendum.

Changes

We may update this policy as the App evolves. Material changes are announced in the App and on this page, with an updated effective date.

Contact

Trackwise Studio · trackwise.studio · support@trackwise.studio