Privacy Policy

This Privacy Policy explains how Rocket Launchpad (“Rocket Launchpad”, “we”, “us”, or “our”) handles information in connection with our Shopify applications, Custom Product Pairs and Checkout Upsells (each an “App”, together the “Apps”). It applies to merchants who install our Apps on their Shopify store. By installing or using an App, you agree to the practices described here.

1. What each app accesses on Shopify

Our Apps run on the Shopify platform and access store data only through Shopify’s official APIs, using the permissions you approve when you install an App. The data each App accesses is different, as summarised below.

2. Information we store

To operate the Apps for your store, we store the following in our database:

• Store and account information — your Shopify store domain and the access tokens needed to call Shopify’s APIs. To authenticate you and your team, we also store the session details Shopify provides, which may include the name, email address, and locale of the store users who sign in to an App.
• Your configuration — the product pairings and offers you set up (product and variant identifiers), placement settings, and visual style settings. For Checkout Upsells this also includes your free-shipping goal and message, trust-badge settings, and offer preferences.
• Anonymous usage analytics — aggregated, per-store counts such as impressions, clicks, items added, conversions, and attributed revenue, stored as daily totals to power your in-app analytics dashboard. These contain no customer identifiers.
• Trial information — the date your store first installed an App, used to manage your free trial (Checkout Upsells offers a one-time 14-day free trial).

3. We do not store your customers’ data

We do not store personal data about your customers (your shoppers). We do not store shopper names, email addresses, postal addresses, payment details, IP addresses, cookies, or browsing or purchase history. Checkout Upsells receives order notifications from Shopify in order to count conversions, but records only anonymous totals — never individual customer data.

4. How we use information

We use the information described above to:

• provide, operate, and maintain the Apps and the features you set up;
• display your configured pairings, offers, free-shipping bar, and trust badges on your store;
• show you anonymous performance analytics for your store;
• authenticate you and maintain your app session;
• manage your Shopify-billed subscription and free trial;
• respond to support requests, and detect and prevent abuse or security issues; and
• comply with our legal obligations.

We do not sell, rent, or share your information, and we do not use it for advertising.

5. Where your data is processed

Your data is stored in a PostgreSQL database hosted on Railway (railway.app), our infrastructure provider. Data is encrypted in transit using TLS and encrypted at rest. We do not share your data with any other third parties; Railway processes it solely to host the Apps on our behalf.

6. Data retention and deletion

We keep your data for as long as you have an App installed. Aggregated analytics are also pruned automatically on an ongoing basis — for example, after 90 days in Custom Product Pairs. When you uninstall an App, Shopify sends us a shop redaction request (within 48 hours), and we delete all data keyed to your store — your pairings, offers, settings, analytics, and session information.

One minimal record is retained: a one-way SHA-256 hash of your store domain together with the date of first install. This hash is irreversible (your domain cannot be recovered from it) and is kept solely to prevent repeated abuse of the one-time free trial. It contains no personal data about your customers or your team. We rely on our legitimate interest in preventing fraud for this limited retention.

We have implemented Shopify’s mandatory privacy webhooks and respond to customer data requests, customer data erasure (redaction) requests, and shop data erasure (redaction) requests. Because we do not store any customer personal data, customer data and erasure requests return no customer data.

7. Your rights and your customers’ rights

Depending on where you or your customers live, privacy laws such as the GDPR and the CPRA may grant rights to access, correct, or delete personal data, or to restrict or object to its processing. Shopify routes data-subject requests from a store’s customers to our Apps through the mandatory privacy webhooks described above. You or your customers can also contact us directly at support@rocketlaunchpad.app, and we will respond in line with applicable law.

8. Security

We use reasonable technical and organisational measures designed to protect the information we process against unauthorised access, loss, or misuse, including encryption of data in transit and at rest. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

9. International data transfers

Rocket Launchpad operates from Serbia, and our infrastructure provider may process data in other countries. Where personal data is transferred across borders, we take steps consistent with applicable law to protect it.

10. Children’s privacy

Our Apps are business tools intended for Shopify merchants. They are not directed to children, and we do not knowingly collect personal data from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Your continued use of an App after an update means you accept the revised policy.

12. Contact us

If you have any questions about this Privacy Policy or how we handle data, contact us at support@rocketlaunchpad.app.

Back to home