Sheet 11 — Legal
The fine print, in plain words.
ClauseGDPR & data requestsIn plain words
3.1
Shopify compliance webhooks
We process the customers/data_request, customers/redact and shop/redact webhooks for every installed store.
We answer every data request Shopify sends us.
3.2
Customer data requests
Requested customer data, including configurations and uploads, is compiled and provided to the merchant within 30 days.
Shoppers can get a copy of their configurations.
3.3
Redaction
Customer and shop redaction requests remove personal data from configurations, orders and uploads.
When asked to delete, we delete.
3.4
Uninstall cleanup
Shop data is deleted 48 hours after uninstall; abandoned uploads are deleted after 30 days.
Uninstall = gone in 48 hours.
3.5
Data processing agreement
The merchant is the controller of shopper data and Composa is the processor. A DPA is available on request from privacy@composa.app.
Need a DPA? Just ask.