Last updated: October 18, 2026

Slide Cart Drawer Cart Upsell ("the App") is developed by HeySenior ("we", "us"). This policy explains what personal information the App collects when a merchant installs it on a Shopify store, how we use it, how long we keep it, and how to exercise your rights. It applies to merchants who install the App and to their customers and store visitors ("shoppers") whose data passes through the App.

1. Information we collect

1.1 From the merchant's store (when you install the App)

• Store information: store name, myshopify.com domain, store owner and contact email address, store time zone, currency and money format, Shopify plan name, and whether the store is a development store.
• Access credentials: the Shopify access token that lets the App work with your store. It is kept in our encrypted database and never shared.
• Store content needed to run the App: products, variants, collections, discounts, themes (to publish the cart drawer), translations and your App settings.
• Billing information: your App plan, subscription status, billing cycle dates and the usage charges Shopify applies. Payments are processed by Shopify; we never see card numbers.

1.2 From shoppers (visitors to a merchant's online store)

The cart drawer runs in the shopper's browser. To display the cart it reads the contents of the shopper's cart (products, quantities, prices, discounts and the cart attributes the App itself sets). It does not collect names, email addresses, phone numbers, postal addresses or payment details of shoppers.

We record the following, linked to the store but not to an identified person:

• Cart analytics: aggregated events such as cart opened, product added from the drawer, checkout started, and the resulting order identifier, order amounts and purchased products, so merchants can see the sales the App generated. Order records contain no customer identity fields.
• Order counting for billing: to bill merchants by the number of orders the cart drawer took part in during each 30-day cycle, we receive Shopify's order webhooks limited to non-identifying fields (order id, creation and cancellation dates, sales channel, our own cart attributes and line-item properties). Point-of-sale orders, draft orders and express checkouts that skip the drawer are not counted.
• Browser storage: the drawer uses the shopper's browser storage (sessionStorage/localStorage) only to remember cart state, timers and the drawer's open/closed state. We do not use it for tracking across sites.

1.3 Support

If you contact us, we keep the messages and the contact details you give us to answer you.

2. How we use the information

• To provide, operate and improve the App (render the drawer, apply rewards, recommendations and discounts, publish settings to your theme).
• To bill the App plan you chose and to show you your usage ("orders this cycle").
• To show merchants analytics about the sales the App generated.
• To provide support and send service messages about your plan (for example, when you approach your plan's order limit).
• To comply with legal obligations and Shopify's platform requirements.

We do not sell personal information, we do not use it for advertising, and we do not use it for automated decisions that have legal or similarly significant effects on shoppers.

Legal bases (EEA/UK): performance of our contract with the merchant, our legitimate interest in operating, securing and billing the App, and compliance with legal obligations.

3. Who we share information with

• Shopify Inc. — the App runs on Shopify's platform; billing and store data flow through Shopify's APIs under Shopify's own privacy policy.
• Hosting and cloud infrastructure providers, including Amazon Web Services (AWS) — servers, database and job queues where the App's data is processed and stored.
• Our email delivery provider — only to send plan and support emails to merchants.
• Professional advisers or authorities when required by law.

We do not share shopper data with any other third party, and we do not disclose it to data brokers.

4. How long we keep information

5. Security

Data is encrypted in transit (TLS) and at rest (encrypted database and backups). Access to production data is limited to the staff who need it to operate the App, and test environments never use production data.

6. Shopper rights and Shopify's privacy webhooks

The App implements Shopify's mandatory privacy webhooks:

• customers/data_request — we provide the merchant with the data we hold about a shopper (in practice: none that identifies the shopper).
• customers/redact — we delete any data related to that shopper.
• shop/redact — we delete the store's data after uninstallation.

Shoppers should send access, correction or deletion requests to the merchant whose store they visited; merchants can forward them to us and we respond within 30 days.

7. Merchant rights

Merchants may ask us at any time to access, correct, export or delete the information we hold about their store by writing to the contact below. Uninstalling the App ends all collection; deletion follows the retention table above.

8. International transfers

The App's data is processed and stored in the United States. When data is transferred from the EEA or the UK we rely on Shopify's and our providers' standard contractual clauses.

9. Children

The App is not directed at children and we do not knowingly collect information from anyone under 16.

10. Changes to this policy

We will update this page when the App's data practices change and update the "Last updated" date. Significant changes are announced inside the App.

11. Contact

HeySenior
Email: [email protected]