Privacy policy: AovUp Sales Agents

Last updated: October 12, 2026

AovUp Sales Agents ("the app") is a Shopify app made by AovUp (aovup.com). It helps a store credit orders to its sales reps and work out their commission. This policy explains what the app stores and why.

What the app stores

• The store's name, domain, currency and time zone, and the app settings the merchant chooses.
• The sales reps the merchant adds: name, and optionally email, phone and notes.
• Which customers are assigned to which rep: the Shopify customer ID and the customer's name, so the merchant's list is readable. A rep's own dashboard shows only the first name and last initial.
• For orders credited to a rep: the order ID and number, its date, the product titles, quantities and prices needed to calculate commission, refunds, and commission status and payouts.
• For orders without a rep: the same order details, so the merchant can credit them later.
• Refunds and cancellations that arrive before an order is credited: amounts only, so they can be applied when it is.

The app doesn't store customer email addresses, phone numbers, postal addresses or payment details, and it doesn't use cookies to track shoppers. An order's email is compared with the rep's email when the order comes in, so reps aren't credited for their own purchases, and isn't kept. When a shopper arrives through a rep's link, the storefront script adds the rep's referral code to the shopper's Shopify cart; nothing else is stored in the browser.

How it's protected

Customer names, and the order details kept for orders without a rep, are encrypted (AES-256) before they're saved. All traffic uses HTTPS, and every view of personal data (by store staff in the app or by a rep on their dashboard) is logged.

How it's used

The data is used only to show the merchant and their reps who sold what and how much commission is due. It isn't sold or shared with anyone else. A rep's dashboard link shows that rep their own orders, commission and their customers' first names and last initials.

Where it's kept

On AovUp's servers. Shopify's privacy requests are honoured: customer data is removed when Shopify sends a customer redaction request, and all of a store's data is deleted when Shopify sends a shop redaction request (48 hours after the app is uninstalled). For Shopify's privacy requests, only the customer and order IDs in the request are kept, never the customer's contact details. When a customer asks the store for their data, the app's dashboard shows the request with a download of everything the app holds about that customer, for the merchant to send them. Access logs are kept for one year.

Contact

Questions or requests: hello@aovup.com.