Data Processing & Compliance

This page sets out our commitment under the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and applicable data privacy regimes worldwide.

Our service is designed as a B2B platform. We operate as a data processor for you, the Shopify merchant, who acts as the data controller. We only process store and product data directly required to provide the service. We do not intentionally intercept, harvest, or track personal data related to your end customers.

1. Sub-Processors

To provide the service effectively, we use industry-standard sub-processors. We ensure that every third-party service is strictly vetted and provides adequate data protection:

• Cloud Hosting Providers: To store the application code, infrastructure, and generated outputs.
• Platform Integrations: Shopify (for core authentication, app delivery, and automated billing).
• Analytics Tools: Anonymous application telemetry for monitoring app health.

2. International Data Transfers

Your data may be processed in data centers outside your home jurisdiction (such as the United States or Canada). We ensure our core infrastructure and sub-processors maintain cross-border transfer compliance (such as the EU-US Data Privacy Framework or SCCs) where legally required.

3. Data Subject Rights (GDPR & CCPA)

Whether you are covered by the GDPR, CCPA, or similar regulations, we grant the following core rights to your store data:

• Right to Know & Access: Request a copy of the data we process concerning your store.
• Right to Erasure ("Right to be Forgotten"): Uninstalling the app triggers automatic shop-erasure mechanisms through Shopify. You may also explicitly request deletion.
• Sale of Personal Information: We do not "sell" or "share" your personal data with third-party advertisers or brokers.

4. Data Breach Protocol

In the event of an unauthorized exposure of store data, we are committed to informing affected merchants and relevant regulatory bodies where required, within 72 hours of verification, and offering remediation paths.