Uncheck

Uncheck for Shopify

Data processing agreement

Last updated · Version française

Uncheck is not on the Shopify App Store yet. No store can install it today, so the app holds no store data. This page sets out the agreement that applies once a store installs it.

When your store installs Uncheck, the app processes some data about your customers on your behalf. This agreement sets the terms of that processing, as Article 28 of the GDPR requires.

It is part of the terms of service of the app. It completes the privacy policy of the app. That policy describes all the data the app handles, including the data about your store, for which we are the controller.

The parties

  • You, the business that installs Uncheck on a Shopify store. For your customers' data, you are the controller.
  • We, 7 Hazart, a simplified joint-stock company (SASU) registered in Paris under number 940 775 042, 6 rue Roubo, 75011 Paris, France, publisher of Uncheck. For your customers' data, we are your processor.

How you accept it

You accept this agreement by installing Uncheck on your store. It applies from that moment until we have erased your store's data after you uninstall the app.

It is in writing, in electronic form, at this address, with the date of its last update at the top.

The processing

  • Subject. Providing the Uncheck app to your store.
  • Nature. The app reads subscription data from your store through the Shopify API and keeps a working copy on its servers. It uses that copy for the purposes below, then erases it. It also receives on its servers two kinds of request from your customers' account: asking for the link to update a payment method, and, each time a customer opens their Subscriptions page, asking which of their subscriptions the app handles. It keeps nothing from them. The page the app adds to your customers' account reads their subscriptions from Shopify in their browser, and sends their cancellations from there to Shopify: the subscription details it shows and the cancellations do not reach our servers.
  • Purposes. Retrying failed subscription payments, exporting your subscriber list, applying the changes you make to subscription contracts, showing each customer in their account their subscriptions with your store, including those sold through another app, and letting them cancel one, and carrying out your customers' requests. When a customer asks for it from their account, the app also has Shopify email them a link to update their payment method. It tells each customer's Subscriptions page which of their subscriptions it handles, so that this link is offered only on those. Nothing else.
  • Duration. While the app is installed, then until your store's data is erased after you uninstall it.
  • People concerned. Your customers who hold a subscription contract with your store, and those who open the Subscriptions page in their account.
  • Data. For each subscription contract the app handles: its Shopify identifier, status, market (the country of its delivery address), start date, number of billing cycles, next billing date and selling plan. Also the Shopify identifiers of the order that opened it and of the customer who holds it. For each failed payment: the retry log (contract, cycle, attempt number, result, date). When a customer asks for the link to update their payment method: the Shopify identifiers of the customer and of the contract, the IP address of their device, and the identifier of the contract's payment method, read from Shopify (never the card details); none of this is stored. When a customer opens the Subscriptions page in their account: their Shopify identifier, the IP address of their device, and the identifiers of their subscriptions with your store and of the app that handles each, read from Shopify; none of this is stored. On the page in the customer's account: the products, quantities, prices, frequency and next billing date of their subscriptions, which their browser reads from Shopify and which never reach our servers.

The app does not read or keep your customers' names, email addresses, phone numbers or payment details, and reads nothing of their address but its country.

Shopify is not our processor: it handles your store's data under your own agreement with Shopify. Data about your store itself (its connection, your settings, your plan) is outside this agreement, because we are its controller.

Our eight commitments

  1. Your instructions only. We process the data only on your documented instructions: this agreement, the settings you choose in the app, and what you ask us in writing. This includes any transfer outside the European Union. If a law requires us to act otherwise, we tell you first, unless that law forbids it.
  2. Confidentiality. Only the people at 7 Hazart who need the data to run or repair the app can access it. Each of them is bound to keep it confidential.
  3. Security. We take the security measures listed below, as Article 32 of the GDPR asks of a processor.
  4. Other processors. You authorise us to use Railway, which hosts the app and its database, and the processors later added as this point allows. The current list is in the privacy policy. This covers Railway's access from the United States, under the safeguards named there. Before adding or replacing one, we email you at least 30 days ahead, at your store's contact address. You can then object. Each is bound by contract to data protection obligations equivalent to ours, and we remain fully liable to you for them.
  5. Your customers' requests. Shopify forwards your customers' requests to the app. When a customer asks for erasure, we remove their identifier from the contracts and erase their retry log. When a customer asks what your store holds about them, we give you what the app holds, so that you can answer. If a customer writes to us directly, we pass the request on to you.
  6. Help with your own obligations. Given what the app does and what we know, we help you secure the processing and deal with a data breach. We also help you carry out an impact assessment or consult the authority when one is required.
  7. End of the processing. When you uninstall the app, Shopify asks us to erase your store's data. We erase all of it, copies included, unless a law requires us to keep it, and backups kept by our host expire in turn. If you want a copy first, download your subscriber export before uninstalling and ask us for the retry log, which we send you. Your subscription contracts stay in your Shopify store.
  8. Proof and audits. We give you the information needed to show that we keep these commitments. We allow and contribute to audits, including inspections, by you or an auditor you appoint, with reasonable notice. We tell you at once if we believe an instruction of yours breaks data protection law.

Security measures

  • The app is served only over HTTPS, so the data is encrypted in transit.
  • Railway hosts the app and its database on servers in Amsterdam, Netherlands, and states that it encrypts stored data at rest.
  • The app checks Shopify's signature on every notification Shopify sends it, and rejects any notification without a valid one.
  • The app accepts a request from your customers' account only with a valid session token issued by Shopify for that customer, and acts only on a contract that Shopify reports as that customer's.
  • The app keeps only the data listed above.

If a data breach occurs

If a breach affects your customers' data, we inform you without undue delay after becoming aware of it.

We tell you what happened, which data and how many people are concerned, the likely consequences, what we have done or propose, and whom to contact.

If we cannot give everything at once, we send what we know first and the rest as soon as we learn it.

Your part as controller

You decide why your customers' data is processed. You make sure the processing has a legal basis and that your customers are informed, in your store's own privacy policy.

Your instructions to us must comply with data protection law. You can check how we keep this agreement, object to a new processor, and end the agreement at any time by uninstalling the app.

Changes to this agreement

When this agreement changes, the new version is published here with its date, and we email you before it applies. If you do not accept it, uninstalling the app ends the agreement.

Questions about this agreement: privacy@7hazart.com.