Privacy policy

Pythia: Upsell & Post Purchase · Last updated October 1, 2026

Pythia: Upsell & Post Purchase (“Pythia”, “we”) is a Shopify app that shows product recommendations and discounts in a store's cart, checkout, post-purchase page and thank-you page. This policy explains what data Pythia handles when a merchant installs it, and what happens to that data.

Data we collect

When a merchant installs Pythia, Shopify gives us access to parts of the store. We store only:

• Store details: the shop domain, the Shopify plan name, the store currency, and the access token Shopify issues so the app can work.
• Merchant settings: upsell offers, volume discount tiers, headings, discounts and design choices made in the app.
• Performance events: when an upsell is shown, clicked, added or purchased, we record the placement, product ID, offer ID, order ID, the upsell amount and the time.

We do not store personal information about shoppers. Pythia reads orders only to work out which line items came from an upsell; it does not save names, email addresses, phone numbers, postal addresses or payment details. The shipping country of a checkout is used once to show prices in the right currency and is not saved.

How we use it

• To show recommendations and apply the discounts the merchant set up.
• To show the merchant's performance dashboard.
• To manage the app subscription through Shopify Billing.

We do not sell data, share it for advertising, or use one store's data to serve another store.

Service providers

• Shopify, which hosts the store and processes all payments and subscriptions.
• Fly.io, which hosts the Pythia app and its database.
• AI model provider (Growth plan, when AI ranking is on): product titles, types, tags and prices from the store are sent to Anthropic or OpenAI to rank recommendations and write short product lines. No shopper data is sent.

Retention and deletion

Data is kept while Pythia is installed. When a merchant uninstalls the app, Shopify sends a deletion request 48 hours later and we permanently delete all of that store's offers, settings, events and access tokens. Shopper data requests and deletion requests from Shopify are answered too; since Pythia stores no shopper personal data, there is nothing to return or erase.

Security

Data is sent over HTTPS. Requests from the checkout are verified with tokens signed by Shopify, and access to the app's admin pages goes through Shopify's login.

Your rights

Merchants can ask to see, correct or delete their store's data at any time. Shoppers should contact the store they bought from; the store can reach us on their behalf.

Changes

If this policy changes, we update the date above. Significant changes are announced in the app.

Contact

Questions about privacy: pythia.upsell.app@gmail.com.