Privacy Policy for Reupsell

Last Updated: January 31, 2026

Please read this Privacy Policy carefully. It provides important information about your personal information and tells you about your rights under applicable privacy laws, including the EU General Data Protection Regulation (GDPR).

1. Introduction

Sky Design Media SRL (hereinafter, "Sky Design Media", "we", "our" or "us"), a Romanian legal entity, owns and operates the Reupsell Shopify application (the "App"). This Privacy Policy describes how we collect, use, and protect data in connection with the use of the Reupsell App within the Shopify platform.

2. Data Processor vs. Data Controller

For Merchants (Clients): When you install Reupsell, Sky Design Media acts as a Data Processor. You are the Data Controller. We process customer data (e.g., product interactions) solely on behalf of the Merchant to provide the App’s functionality.

3. Information We Collect

3.1 Information Provided Directly

We collect the store owner's name, email address, and shop URL via the Shopify API to provide our services and facilitate support communications.

3.2 Information Collected via Shopify API

• Product Information: Titles, images, and prices to create refurbished/open-box carousels.
• Inventory Data: To ensure "Renewed" items are in stock before displaying them.
• Order Analytics: Tracking purchase origins to provide ROI and conversion data.

4. How We Use Personal Information

We process your data based on the following legal grounds:

• Performance of a Contract: To provide the upselling and bundling features.
• Legitimate Interests: To improve App stability, prevent fraud, and provide analytics.
• Legal Obligation: To comply with Romanian tax and trade laws.

5. Data Retention

We retain personal information only as long as your account is active. If you uninstall the App, we delete associated merchant data within 48 hours, except for data we are legally required to keep for tax purposes.

6. Your Rights (GDPR)

If you are a resident of the EEA/Romania, you have the following rights:

• The right to access and data portability.
• The right to rectification and erasure ("Right to be forgotten").
• The right to restrict or object to processing.
• The right to withdraw consent at any time.