Read-only by design. No shopper names, emails, or card details through the Shopify integration, and we never sell personal data.
Last updated: 3 July 2026 · Good Point Inc.
This Privacy Policy explains how AfterBye ("AfterBye", "we", "us"), operated by Good Point Inc., collects, uses, and protects information when a merchant installs or uses the AfterBye app and services, including the AfterBye app for Shopify. AfterBye adds a post-purchase upsell and curated partner offers after checkout and reports the resulting attribution and revenue share to the merchant.
AfterBye is read-only by design. Through the Shopify app we request access only to your product catalog (read_products) and never write to your store. We do not request or receive your shoppers' names, email addresses, postal addresses, or phone numbers through the Shopify integration. We process order-level attribution data (order identifier, line items, totals) to compute conversions and your revenue share. We do not sell personal data.
The controller responsible for your information is Good Point Inc. For privacy questions or to exercise your rights, contact hello@afterbye.io or +972 54-434-3133.
Merchant account data. When you create an AfterBye account or install our app, we process your store name, the owner's email address, a hashed password (where applicable), and your store's currency and language settings. For Shopify installs we also store your shop domain, an offline Admin API access token (used only to read your catalog), and, where available from your shop profile, your store name, contact email, currency, and primary locale.
Store catalog data. Product titles, descriptions, prices, images, SKUs, and variant identifiers synced from your store so we can surface and rank offers. This is business catalog data, not personal data.
Order & attribution data. To attribute conversions and compute revenue share we process order-level data: an order identifier, line items, and totals. Through the Shopify integration we do not collect shopper contact details. On other connected platforms, a shopper's email address is processed only where the store transmits it to us for order attribution; we erase it on request and on the redaction signals described in Section 6.
Usage & device data. Offer impressions, clicks, and conversions, a short-lived session identifier, and a login token stored in your browser's local storage to keep you signed in to the dashboard. We use essential cookies/local storage for authentication; we do not use third-party advertising trackers.
Our legal bases (where the GDPR applies) are performance of our contract with you, our legitimate interests in operating and securing the service, and compliance with legal obligations.
The AfterBye app for Shopify requests only the read_products scope and writes nothing to your store. It does not request the read_orders or read_customers scopes. Order attribution data is surfaced by the checkout and post-purchase extensions and contains no shopper name, email, address, or phone number. The one-click post-purchase upsell is charged through your own Shopify Payments: AfterBye never sees or stores card details.
AfterBye subscribes to and honors Shopify's mandatory privacy webhooks. When Shopify sends a customers/data_request, we respond in accordance with this policy. On customers/redact we erase any stored email and related wallet record for that shopper. On shop/redact (after a store uninstalls) we erase the store's order emails and delete its stored Shopify access token and integration. You may also request deletion at any time via the contact below.
We do not sell personal data. We share information only as needed to run the service:
We may process information in countries other than yours. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers.
We keep personal data only as long as needed for the purposes above, principally to provide reporting and revenue-share calculations to the merchant, and then delete or anonymize it. Account and integration data is retained for the life of the account and removed on uninstall/closure, subject to legal retention requirements.
We apply data minimization, encrypt data in transit (HTTPS) and at rest, hash passwords, restrict internal access to data, and store access tokens securely. No method of transmission or storage is completely secure, but we work to protect your information.
Depending on your location, you may have rights to access, correct, delete, or port your personal data, and to object to or restrict certain processing. Merchants can exercise these by contacting us below. Shoppers should contact the store they purchased from; AfterBye will assist that store, including by honoring the Shopify redaction webhooks above. We will not discriminate against you for exercising your rights.
The service is intended for businesses and is not directed to children under 16.
We may update this policy from time to time. We will revise the "Last updated" date above and, for material changes, provide additional notice where appropriate.
Questions or requests: hello@afterbye.io, +972 54-434-3133, Good Point Inc.