This page summarises the data processing terms between you (the merchant) and Everbranch for the JUNO app, as required by Article 28 of the GDPR and the UK GDPR. It forms part of our terms of service.
It is a summary, not the full agreement. To sign a data processing agreement (DPA) for your records, email contact@everbranch.co.
Roles
- You are the controller of personal data about your shoppers and of the personalization they submit on your store.
- Everbranch is your processor for any of that data JUNO handles. We process it only to provide JUNO to you.
- For your own account data (your store details and the staff members who use JUNO), Everbranch acts as an independent controller, as described in our privacy policy.
What JUNO processes
| Item | Details |
|---|---|
| Subject matter | Providing the JUNO personalization app for your Shopify store |
| Duration | While JUNO is installed on your store, plus the deletion period below |
| Nature and purpose | Storing templates and product data, rendering personalization on your storefront, and passing shoppers’ choices to the Shopify cart |
| Data subjects | Your shoppers, and your staff who use JUNO |
| Categories of data | Personalization a shopper enters (for example, a name to engrave), handled in the shopper’s browser and passed to Shopify, not stored by JUNO. Staff names, emails and Shopify user IDs |
| Special category data | None intended. Don’t ask shoppers for sensitive data in personalization fields |
JUNO does not access Shopify customer or order records. Images shoppers choose in upload fields stay in their browser and are never sent to us.
Our commitments
As your processor, we:
- process personal data only on your documented instructions, which are these terms and your use of JUNO’s settings;
- make sure everyone who can access the data is bound by confidentiality;
- keep appropriate technical and organisational security measures in place (see Security);
- use only the subprocessors listed below, and tell you before we add or replace one;
- help you answer data subject requests, including through Shopify’s privacy webhooks;
- tell you without undue delay after we become aware of a personal data breach affecting your data, with the information you need to meet your own obligations;
- help you with data protection impact assessments where they concern JUNO;
- delete your data when you uninstall JUNO (see Deletion); and
- give you the information you reasonably need to show compliance, and allow reasonable audits by you or an auditor you appoint, with reasonable notice.
Subprocessors
You authorise us to use these subprocessors:
| Subprocessor | Service | Location |
|---|---|---|
| Cloudflare, Inc. | Hosting of the app, request and error logs | Global network |
| Neon (Databricks, Inc.) | Database hosting for store data | EU: Frankfurt, Germany |
We will tell you at least 30 days before adding or replacing a subprocessor that processes your data. If you object on reasonable data protection grounds and we can’t resolve it, you can uninstall JUNO.
Our contracts with subprocessors give your data at least the same protection as these terms.
Security
- Encryption in transit (HTTPS) for every request to the app.
- Data stored with providers that encrypt it at rest.
- The fewest Shopify permissions JUNO needs: products, files, themes and cart transforms. No access to customers or orders.
- Access to production systems limited to the people who need it.
- Every request from Shopify, including webhooks and storefront requests, is verified by its signature.
Shopify privacy requests
Shopify forwards privacy requests to JUNO through its mandatory webhooks:
- Customer data request and customer redaction: JUNO stores no personal data keyed to individual shoppers, so there is nothing to deliver or delete. We record that the request arrived.
- Store redaction: we delete all of your store’s data.
Deletion
When you uninstall JUNO we delete your store’s data: sessions, templates, product copies and settings. Shopify’s store redaction request, 48 hours after uninstall, repeats the deletion. Short-lived technical logs expire automatically.
International transfers
Your store data is stored in the European Union (Neon, Frankfurt). Cloudflare runs a global network, so requests may be handled in the data centre nearest to you, including outside the European Economic Area and the UK. For those transfers we rely on an adequacy decision (such as the EU–US Data Privacy Framework, under which Cloudflare is certified) or the European Commission’s Standard Contractual Clauses, together with the UK addendum.
Contact
For DPA and data protection questions: contact@everbranch.co.