Data Processing & GDPR

Roles

For data about your shoppers, you are the controller and DigitalCubez is your processor: we process it only to run the app for you, as described in the Privacy Policy.

What we process

Order and line-item details and anonymous storefront events. No customer names, emails, phone numbers or addresses. Cart images merchants upload are product photos, not personal data, and are erased with the store’s data.

Customer data requests

The app answers Shopify’s mandatory privacy webhooks: customer data requests, customer erasure and shop erasure. Shop erasure permanently deletes the store’s data from our systems.

Security

• encrypted connections for all data in transit;
• access to production data limited to the people who run the app;
• the least data needed, kept only as long as needed.

Breaches

If a breach affects your data, we will tell you without undue delay, and within 72 hours of finding out, with what we know and what we are doing about it.

Subprocessors

Shopify, and our hosting and email providers. Use the contact form on this site for the current list.