Terms of Service
Upload Box · last updated 2026-09-30 · Privacy Policy
Agreement
These terms are an agreement between the merchant who installs Upload Box ("you") and operix, which operates the app ("we"). By installing or using the app you agree to them. Our Privacy Policy is part of these terms.
What the app does
Upload Box adds a file upload button to your product pages. Shoppers' files are saved to your store's Files in Shopify and linked on the cart item, so each file shows on the order. The app keeps a list of uploads inside your Shopify admin.
Billing
Plans are billed by Shopify on your Shopify invoice. Uploads count toward your plan when they end up on an order. There are no overage charges and uploads never stop in the month you go over. If a store on the Free plan goes over in two months in a row, uploads pause in the second month once the limit is reached after day 14, and shoppers see your own message instead of the upload button until you upgrade or the month ends. You can change or cancel your plan from the app at any time; uninstalling the app cancels the subscription.
Data processing
Shoppers send you files through the upload button. Files can contain personal data, such as photos of people. For that data you are the controller and we act as your processor: we process it only to provide the app to you and only as described in our Privacy Policy.
- We use the data only to save files to your store's Files, attach them to cart items, and show the upload list. We do not sell it, share it for advertising, or use it to train models.
- Sub-processors: Shopify (the platform, and your store's Files where the files are saved) and Railway (hosting and database; it does not receive the files). We will update the Privacy Policy before adding another.
- Security: the app is served only over HTTPS, requests from Shopify are verified by signature, and data is stored with our hosting provider's encryption at rest. Access is limited to the operator.
- Deletion: when you uninstall, Shopify sends a shop/redact request 48 hours later and we delete everything we hold for your shop. The files stay in your store's Files, because they are part of your store and the app no longer has access; you can delete them from Content → Files. When a shopper asks to be deleted, Shopify sends a customers/redact request and, while the app is installed, we delete that shopper's files from your store's Files. You can ask for deletion sooner by email.
- Incidents: if we become aware of a breach affecting your data, we will notify you by email within 72 hours of confirming it, with what happened and what data was involved.
- Your part: you are responsible for having a lawful basis to collect your shoppers' files and for telling them in your own privacy notice that you use Upload Box to receive files.
Changes and ending
We may update these terms. The date at the top of this page is the last change; continuing to use the app after a change means you accept it. You can stop at any time by uninstalling the app.
Contact
Questions about these terms or your data: beobjoong@gmail.com