Merchant Data Protection Terms

Version: 2026-08-18

These Merchant Data Protection Terms form part of the terms governing a merchant’s use of AdEditors Ecommerce with Shopify. By accepting them in the embedded app, the merchant instructs AdEditors to process Shopify-derived data only to provide the requested synchronization, analytics, advertising-performance analysis, product intelligence, reporting, and related support functionality.

Roles and instructions

The merchant remains responsible for its store and its relationship with customers. AdEditors processes Shopify-derived data on the merchant’s documented instructions expressed through installation, configuration, synchronization, analysis, support requests, and these terms. AdEditors will not use Shopify protected customer data for unrelated advertising, sale of customer data, or customer profiling for third parties.

Data minimization

AdEditors is designed not to sync customer names, email addresses, phone numbers, or postal addresses. It may process Shopify order/customer identifiers, order totals and statuses, line-item/product references, timestamps, currency, and aggregate customer/order metrics that are necessary for merchant-facing analytics and reconciliation.

Retention and deletion

• Raw Shopify order/customer identifiers and line-item records: up to 90 days while connected.
• Operational sync and completed privacy-request logs: up to 30 days.
• Aggregate, non-customer-identifying commerce snapshots: may remain while the merchant account is active for historical analytics.
• Shopify customer redaction requests remove matching customer/order data earlier.
• Shop uninstall/redact purges connection-owned Shopify data; a 7-day fallback purge applies to recorded uninstalled/disconnected connections.

Security

Shopify traffic is transmitted over HTTPS. Shopify access and refresh tokens are encrypted at rest by the application. Access to Shopify-connected data is restricted to authenticated app users and server-side processes required to provide the service.

Subprocessors and service providers

AdEditors may use hosting, infrastructure, email-delivery, analytics, monitoring, or AI service providers where enabled in the deployed environment. Merchant data is disclosed only as needed to provide the enabled service and remains subject to the applicable provider and merchant agreements.

Privacy requests

AdEditors supports Shopify’s mandatory privacy webhooks for customer data requests, customer redaction, and shop redaction. Merchants can also contact support for questions about processing, retention, or deletion.

Merchant responsibilities

The merchant is responsible for providing legally required notices to its customers, selecting appropriate Shopify scopes and app features, and using AdEditors outputs in accordance with applicable law and Shopify policies.