Merchant documentation

Install Upsell Pilot from its Shopify listing and approve only the scopes shown by Shopify. Open the embedded app, confirm the connected shop and plan, complete the product and order sync, set profit and inventory guardrails, verify the Web Pixel and theme app extension, and run the first read-only scan.

A scan reads the minimum catalogue, order, refund, cost, inventory, publication, and measurement facts needed for an opportunity. It does not edit products, prices, collections, discounts, or the theme. Eligible, incomplete, and blocked findings remain visible with their source period, limitation, and next safe action.

The Shopify Web Pixel records only allowlisted events needed to measure an app-owned experiment. When the required consent is unavailable, the visitor remains in control and Upsell Pilot emits no exposure. Browser events are pseudonymous; a purchase is counted only after a signed cart assignment is reconciled with an authenticated Shopify order.

Mandatory Shopify privacy webhooks handle customer data access, customer redaction, and shop redaction. See the privacy notice, data-processing summary, and subprocessor register.

Every opportunity is produced by a versioned deterministic rule. Its view names the observation window, source counts, completeness, confidence where applicable, risk, required remediation, and the exact tactic it could prepare. Missing evidence never becomes an estimated uplift.

Association tactics use bidirectional support, confidence, lift, and order-count floors. Inventory, publication, consent, theme, cost, currency, or sample gaps keep the opportunity blocked rather than hiding it.

Saving a tactic creates configuration only. Preparing an experiment, approving its launch, and applying it are separate actions. Immediately before launch, Upsell Pilot rechecks the plan, consent-aware measurement, publication, market, profit, inventory, Shopify Function ownership, theme placement, worker health, and rollback evidence.

Eligible visitors receive a stable control or variant assignment for the registered experiment. A winner means the pre-registered binary primary metric passed its fixed horizon, sample, allocation, data-quality, guardrail, and uncertainty rules. Revenue, average order value, or contribution profit is descriptive unless a separately versioned protocol explicitly makes it the inferential metric. “No clear difference” and “insufficient data” are valid outcomes.

A Web Pixel checkout event is not purchase authority. Upsell Pilot attributes an order only when the authenticated Shopify order contains the valid app-issued assignment marker and the assignment, shop, experiment, variant, time window, currency, and duplicate checks agree. It does not join purchases by amount-and-time similarity.

Test, cancelled, ineligible, or duplicate orders do not support a decision. Partial and full refunds update refund-adjusted net revenue and contribution evidence. A late refund remains visible and can invalidate an apparent result.

Contribution evidence starts with authoritative order revenue, discounts, refunds, currency, product cost, and the merchant's versioned shipping, fulfilment, payment, and merchandising cost assumptions. The app shows the source and effective date of each assumption.

Unknown, stale, mixed-currency, or ambiguous cost is never treated as zero. Upsell Pilot may still show factual order and refund evidence, but it labels contribution incomplete and blocks a profit claim or profit-dependent automation until the merchant supplies current evidence.

Before uninstalling, stop experiments and verify control when practical. Shopify's uninstall webhook revokes the installation, stops app-owned runtime work, and enters the authenticated deletion lifecycle. Theme app blocks can also be removed in the theme editor. Reinstall never silently restores an old live treatment.

Verified merchant staff can use the Privacy area for available exports and request status. For help, use the support page. Never send customer personal data, access tokens, passwords, card details, or webhook secrets.