Data Processing Addendum

The data subjects are the store's shoppers. The personal data is what an order record links to a shopper: the order number, dates, amounts and line items, the visit that led to the order (landing page, referring site, UTM source, medium and campaign, first and last visit time) and the shopper's language setting. ConvRadar never queries or stores shoppers' names, emails, phones or addresses.

The purpose is to show the merchant its own store's numbers. Processing lasts while the app is installed and ends with the deletion in section 6.

ConvRadar processes store data only to run the Service for the merchant who installed the app; using the Service is the merchant's instruction. Store data never enters a pool across merchants or any number shown to someone else. Only the operator has access to it, under a duty of confidentiality.

On request ConvRadar gives the merchant the information needed to show that this addendum is kept, and answers an audit request in writing within 30 days.

Store data travels over TLS and rests in a database where row level security separates each account. The store's access token is stored encrypted. The app holds read-only access to orders, products, inventory and analytics. The measures in force are described on the Security page.

The merchant authorises the subprocessors on the Subprocessors page. ConvRadar adds a new subprocessor of store data to that page before it receives any, and holds each one to data protection terms no weaker than this addendum.

Subprocessors outside the merchant's country receive data under the European Commission's Standard Contractual Clauses (Module 3, processor to processor) in their data processing terms, and for UK data under the UK International Data Transfer Addendum.

ConvRadar receives Shopify's privacy requests directly. An erasure request clears the visit details of that shopper's orders and keeps them from loading again. A data request lists what ConvRadar holds for the named orders in the app under Settings, Data requests, for the merchant to pass on.

ConvRadar tells the merchant about a personal data breach that affects its store data without undue delay and within 72 hours of learning of it, with what is known about its scope.

ConvRadar deletes the store data and everything derived from it (findings, exports and chat messages about the store) when Shopify sends its shop/redact request 48 hours after the app is uninstalled, and in any case within 30 days of the uninstall. Before uninstalling, the merchant can download the store's data from ConvRadar's export.