Agreement Overview
This Data Processing Agreement ("DPA") forms part of the use of AIOD Automatic Discount & Gift ("AIOD", "Processor") by the merchant ("Controller").
1. Subject Matter and Scope
AIOD processes personal data solely to provide app functionality, including discount configuration, cart logic, and storefront rendering.
2. Nature and Purpose of Processing
Processing is limited to executing discount and promotional logic within Shopify, based on the Controller's instructions.
3. Types of Data
Processing may include limited customer and order-related data, product and catalog data, and store configuration data as made available via Shopify APIs and required for app functionality.
4. Duration
Processing continues for the duration of app usage. Upon uninstall, data is permanently deleted within 24–48 hours.
5. Processor Obligations
- Process data only on documented instructions from the Controller
- Ensure confidentiality of personnel
- Implement appropriate technical and organizational measures
- Assist the Controller with data subject requests where applicable
- Notify the Controller of any personal data breach without undue delay
6. Subprocessors
AIOD may engage subprocessors to provide infrastructure and operational support. A current list is maintained on the Subprocessors List page, and all subprocessors are bound by equivalent data protection obligations.
7. International Transfers
Where applicable, AIOD relies on Standard Contractual Clauses or equivalent safeguards for international transfers.
8. Audit and Information Rights
AIOD will provide reasonable information to demonstrate compliance. Formal audits, if required, shall be limited to a reasonable scope and frequency.
9. Contact
For execution of a signed DPA, please contact AIOD support.