Privacy & data protection
Last updated August 25, 2026
This page describes what Harbor Premium Upsells (“Harbor”, “we”) processes on behalf of merchants who install it, and is the basis of our data-processing disclosure.
What we process, and why
Harbor exists to show upsell offers in your cart and report the revenue they generate. To do that we process:
| Data | Purpose | Customer personal data? |
|---|---|---|
| Product data (titles, handles, images, prices) | Configuring and rendering offers | No |
| Order line items, order id, totals, currency | Attributing upsell revenue and reporting it to you | No customer fields — we never access or store name, email, phone, or address |
| Offer impression and click counts | Funnel reporting to you | No — counters are per offer, with no user identifiers, no cookies, no fingerprinting |
That is the complete list. We process the minimum personal data required to provide the service, use it only for the purposes above, and never sell, share, rent, or otherwise monetize any data.
What we store
- Your offers and their settings
- Daily aggregate counters per offer (impressions, clicks, accepts)
- Per-order attribution rows: order id, attributed revenue amount, currency — nothing else from the order
We store no customer-level records of any kind.
Retention
- Attribution rows are retained for 24 months, then deleted automatically.
- On a
customers/redactrequest we delete attribution rows for the named orders immediately (although they contain no customer fields). - On
shop/redact(48 hours after uninstall) we delete all data for the shop: offers, metrics, and attribution rows.
Security
- All data moves over TLS — webhooks, app proxy, and admin traffic are HTTPS-only.
- Production data is stored on managed database infrastructure with encryption at rest.
- Webhook and app-proxy requests are verified against Shopify’s HMAC signatures before processing.
Consumer rights & consent
The storefront widget sets no cookies and collects no personal data from your customers, so consent frameworks (GDPR consent, CCPA sale opt-outs) have nothing to attach to — there is no personal data collected on the storefront to consent to or opt out of. We perform no automated decision-making with legal or similar effects.
Contact
Data questions or requests: support@harbor.cx