Legal

Privacy & Cookie Policy

Last updated: August 16, 2026

This Privacy & Cookie Policy describes how Outpost Apps Pte. Ltd. (“Outpost Apps”, “we”, “us”, “our”) collects, uses, shares, and protects personal information when you:

• visit our website at outpostapps.com (the “Site”);
• install or use our Shopify applications, including LaunchLab Cart Upsell & Bundle and Snapshot: AI Image Generator (the “Apps”); or
• contact us for support, by email or through our in-app and on-site chat.

By using the Site or the Apps, you agree to the collection and use of information in accordance with this policy.

1. Who we are

For the purposes of applicable data protection law (including Singapore's Personal Data Protection Act 2012 (“PDPA”) and, where applicable, the EU/UK General Data Protection Regulation (“GDPR”)), Outpost Apps Pte. Ltd. is the controller of personal data collected through the Site. For merchant store data processed through the Apps, we generally act as a processor/service provider on behalf of the merchant.

2. Information we collect

2.1 Information collected automatically (Device Information)

When you visit the Site, we automatically collect certain information about your device, including your web browser, IP address, time zone, approximate location (country level), and some of the cookies installed on your device. As you browse, we may also collect information about the pages you view, the websites or search terms that referred you, and how you interact with the Site. We collect this using cookies, log files, and similar technologies (see the Cookies section below).

Our website is delivered through Cloudflare, which may process network and security data such as IP address, request headers, approximate location, timestamps, and threat signals to deliver the Site and protect it from abuse. We do not use the Site for behavioral advertising.

2.2 Information from merchants using our Apps

When you install one of our Apps from the Shopify App Store, Shopify shares certain information with us based on the permissions you approve at install time. Depending on the App, this may include:

• Store and account information — store name, store domain (myshopify URL), store owner name and email address, store locale and currency;
• Product and catalog data — products, variants, prices, collections, and product images (used, for example, by LaunchLab to build offers and by Snapshot to generate and attach images);
• Order and cart data — order values and line items to the extent needed to operate features such as upsell attribution and revenue-based plan limits in LaunchLab;
• Images and prompts — product photos you upload and text prompts you submit to Snapshot for AI image generation;
• App usage data — configuration choices and feature usage, which we use to operate and improve the Apps.

We do not receive or store your customers' payment card numbers. Billing for our Apps is handled by Shopify's billing system.

2.3 Support and communications

When you contact us by email or via the Intercom chat messenger, we collect the contact details you provide (such as name and email address), the contents of your messages, and related metadata, so that we can respond and keep a record of the conversation.

The Intercom messenger is not loaded merely because you visit or scroll the Site. It loads after you deliberately select an “Open support chat” control. Intercom may then set functional cookies and process conversation and device information needed to provide support.

3. How we use your information

• To provide, operate, maintain, and improve the Site and the Apps;
• To set up and manage your use of the Apps, including plan limits and billing through Shopify;
• To generate AI product images you request through Snapshot;
• To respond to support requests and communicate with you about the services;
• To monitor performance, debug issues, and protect against fraud, abuse, and security risks;
• To understand how visitors and merchants use our services so we can improve them;
• To comply with legal obligations and enforce our Terms of Service.

Where the GDPR applies, we rely on the following legal bases: performance of a contract (providing the Apps and support), legitimate interests (improving and securing our services, limited analytics), consent (where required, e.g. non-essential cookies), and compliance with legal obligations.

4. Cookies

A cookie is a small text file stored on your device by your browser when you visit a website. We use the following categories of cookies and similar technologies:

Category	Purpose	Examples
Strictly necessary	Required for the Site and Apps to function (e.g. session handling, security). These cannot be switched off.	Session and security cookies
Functional / support	Power the Intercom chat messenger so we can provide support and continue previous conversations.	Intercom (intercom-*), loaded after you open chat

You can control and delete cookies through your browser settings, and most browsers let you block them entirely — though parts of the Site (such as chat support) may stop working. To learn more about cookies, visit allaboutcookies.org.

We do not currently use advertising cookies or cross-site behavioral advertising on the Site. If our cookie practices materially change, we will update this policy and provide consent controls where required.

5. How we share information

We share personal information with service providers who help us run our business, and only as needed for them to perform their services:

• Shopify — our Apps run on the Shopify platform and use Shopify APIs and billing. See Shopify's Privacy Policy;
• Intercom — powers our support chat and support email workflows. See Intercom's Privacy Policy;
• Cloud infrastructure providers — hosting, storage, and content delivery for the Site and Apps;
• AI service providers — images and prompts submitted to Snapshot are processed by third-party AI image-generation services solely to produce your requested images; they are not used to advertise to you;
• Legal and safety — we may disclose information to comply with applicable laws and regulations, respond to a subpoena, search warrant, or other lawful request, or otherwise protect our rights and the safety of others.

We do not sell personal information.

6. Shopify merchant data & GDPR webhooks

Our Apps subscribe to Shopify's mandatory privacy webhooks. When a merchant uninstalls an App or Shopify forwards a data request on behalf of a merchant or their customer, we act on it automatically:

• customers/data_request — we provide the requested customer data we hold, if any;
• customers/redact — we delete personal data we hold about the customer;
• shop/redact — we delete the store's data after the retention window that follows uninstallation.

7. Data retention

We keep personal information only as long as needed for the purposes described above. In general: store data associated with an App is deleted following uninstallation in line with Shopify's redaction schedule; support conversations are retained so we can reference history in future support interactions; and generated images remain available to you until you delete them or your store data is redacted. We may retain limited records where required for legal, accounting, or dispute-resolution purposes.

8. International transfers

We are based in Singapore, and our service providers may process data in other countries, including the United States and the European Economic Area. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

9. Your rights

Depending on where you live, you may have rights to access, correct, update, port, restrict, object to the processing of, or delete the personal information we hold about you, and to withdraw consent where processing is based on consent. Residents of the EEA/UK have these rights under the GDPR; Singapore residents have access and correction rights under the PDPA; and residents of certain U.S. states (such as California) have similar rights under state privacy laws.

To exercise any of these rights, contact us at support@outpostapps.com. If you are a customer of a store that uses our Apps, please direct your request to that store (the merchant), and we will assist them in fulfilling it. You also have the right to complain to your local data protection authority.

10. Security

We use administrative, technical, and organizational measures designed to protect personal information, including encryption in transit, access controls, and least-privilege API scopes. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

More information about our safeguards and how to report a suspected vulnerability is available on our Security page.

11. Children

Our Site and Apps are intended for business use and are not directed to individuals under 16. We do not knowingly collect personal information from children.

12. Do Not Track

Some browsers transmit “Do Not Track” signals. Because there is no common standard for interpreting them, our Site does not currently respond to DNT signals.

13. Changes to this policy

We may update this policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the updated policy on this page with a revised “Last updated” date, and where changes are material we will provide additional notice.

14. Contact us

For questions, requests, or complaints about our privacy practices, contact us: