Data processing agreement

This agreement applies whenever a merchant installs one of our apps and we process personal data on their behalf. It forms part of the terms of service. No signature is needed — installing the app accepts it — but if your organisation needs a countersigned copy, email privacy@saliapps.com and we will provide one.

Roles#

• You (the merchant) are the controller. You decide what to ask your customers and why.
• We (Sali Digital LLC) are the processor. We process personal data only on your documented instructions — which, in practice, means the settings you configure in the app.

What we process#

• Categories of data subject: your customers, and your staff who use the app.
• Categories of personal data: survey responses (including free-text answers, which may contain anything a customer chooses to type), the Shopify order identifier a response relates to, and the email address of a staff user where an integration requires one.
• Special category data: none is requested. A free-text answer could contain some, which is why free-text fields are encrypted at rest.
• Duration: for as long as the app is installed, then deletion as described below.

Our obligations#

1. Process only on your instructions, and tell you if we believe an instruction breaches applicable data protection law.
2. Confidentiality — everyone with access is bound to it.
3. Security — the measures listed in the privacy policy: network isolation of the database and cache, encryption at rest for tokens and free-text responses, hashed passwords, signed httpOnly sessions, and encrypted off-site backups.
4. Sub-processors — we use those listed below. We will give you notice before adding one, and you may object.
5. Assistance — we help you respond to data subject requests. In practice, Shopify's customers/data_request and customers/redact webhooks are implemented, so a request made through Shopify reaches us automatically.
6. Breach notification — we will tell you without undue delay after becoming aware of a personal data breach affecting your data, with what we know at the time rather than waiting for a complete picture.
7. Deletion — Survey responses are retained for as long as the app is installed, so historical reporting does not silently truncate. They are deleted when the app is uninstalled, and on a verified customer erasure request. Store data remaining after uninstall is erased within 30 days.
8. Audit — we will provide the information reasonably needed to demonstrate compliance.

Sub-processors#

Sub-processor	What they do	Where
Hostinger International Ltd.	Application and database hosting	European Union
Shopify Inc.	Merchant authentication, billing, and app delivery	Canada / United States
Resend, Inc.	Transactional email delivery	United States
Functional Software, Inc. (Sentry)	Error monitoring	United States

International transfers#

Processing happens in the European Union. Where a sub-processor is outside the EEA or UK, transfers rely on Standard Contractual Clauses or an equivalent recognised mechanism.

Your obligations#

You are responsible for having a lawful basis to ask your customers what you ask them, for your own privacy notice, and for honouring the marketing consent rules that apply to you before using any data collected through our apps for marketing.

Contact#

privacy@saliapps.com — Sali Digital LLC, publisher of Sali Apps.