We care deeply about the privacy of our customers and partners. Therefore, we have invested a significant effort to study and implement this Privacy Notice according to General Data Protection Regulation (GDPR) regulation.

Definitions

Term Explanation
Excelify.io The Shopify app with its related websites and services. Acting as the data Processor according to the GDPR.
The App The Excelify.io app, called “Excelify: Bulk Import Export Update” on the Shopify AppStore.
Visitor Visitor of our web resources which may or may not be the app user.
App User The person who uses the app while it is installed on their Shopify store. In GDPR terms the App User is the data Controller.
Partner Any service provider or affiliated partner or a 3rd party.
Subject Visitors, App Users or Partners
Support Excelify,io Support. Contact information can be found on the Contact Us page.

General Principles

  • We process or store only the data that is absolutely necessary for the app to function and be able to provide the high-quality service.
  • The lawful basis for processing the personal data is the Consent, which is prominently requested to opt-in when starting to use The App.
  • App Users have the right to know what specific data is saved about them and for what reason, which in general principles is described in this document.
  • App Users have the rights to be forgotten by asking the Support to destroy all or specific the data about them. When destroying the data, the only data kept will be the one that is required for legal purposes or for financial accounting.
  • Excelify.io will never share any data of one App User with another, without permission of the App User.

Data Subjects

We are processing or storing the data of the following parties:

  1. Web Page Visitors: visitors of the web pages and other resources related to Excelify.io.
  2. App Users: persons and Shopify stores that have installed The App, hosted on https://app.excelify.io resource.
  3. Partners: any 3rd parties like service providers or affiliated partners.

The data that is being processed by The App as requested by App Users (e.g. Shopify Customers or Orders data), cannot be considered as a data subjects because Excelify.io doesn’t control the contents of that data. This is strictly under the control of the App Users themselves.

Processed and Stored Data by each Data Subject and Resource

We process or store the following data about each of the data Subject, for each resource:

Subject: Web Page Visitor

Resource: “Excelify: Bulk Import Export Update” App page on Shopify App Store

Stored / Processed Data Purpose Service Provider
Analytics tracking To analyze the traffic sources for marketing purposes. Google Analytics
Remarketing tracking To show ads targeted specifically to the visitors of the app page. Google AdWords

Resource: https://excelify.io webpage

Stored / Processed Data Purpose Service Provider
Analytics tracking To analyze the traffic sources for marketing purposes, including IP address geolocation data, browser, visited pages, and other data Google Analytics can track. Google Analytics
Remarketing tracking To show ads targeted specifically to the visitors of the page or to generate look-alike audiences. Google AdWords
Recording of the web page usage Recording 4 random visitor sessions per day with the goal to understand what is unclear for visitors when using the website. Inspectlet
Cusrtomer support data Enable visitors to chat with Excelify.io support employees directly from the web page. Tawk.to
Visitor tracking To analyze traffic sources for marketing purposes. Excelify.io App

Resource: Support Channels

Stored / Processed Data Purpose Service Provider
Contact data and communication history To recognize an existing customer and continue support conversation based on earlier history and context. Tawk.to
Contact data and communication history To recognize an existing customer and continue support conversation based on earlier history and context. Skype
Contact data and communication history To recognize an existing customer and continue support conversation based on earlier history and context. WhatsApp
Contact data and communication history To recognize an existing customer and continue support conversation based on earlier history and context. Slack

Subject: App User

Resource: Excelify.io App

Stored / Processed Data Purpose Service Provider
Analytics tracking To analyze the aggregated usage statistics of The App. Google Analytics
Remarketing tracking To show ads targeted specifically to the app users or to generate look-alike audiences. Google AdWords
Recording of the web page uses Recording 4 random visitor sessions per day with the goal to understand what is unclear for visitors when using The App. Inspectlet
Customer support data Enable visitors to chat with Support employees directly from The App, and exchange e-mail tickets. Tawk.to
Visitor tracking To analyze traffic sources for marketing purposes, including IP address geolocation data, browser, visited pages, history of actions. Excelify.io App
Contact information To send periodic e-mails with news updates to e-mails who opted in for that. MailChimp
Contact information and store information Shopify provides the statistics about the stores who installed The App and their payment history. Shopify Partner Account
Alerts about important events Notify about system monitoring events, installs, uninstalls, or any other significant events that might require immediate action or would allow improving service quality. Slack
Imported & exported data files Imported and exported data files are stored in Amazon, US regions.

The app users need historical uploaded, imported, import results, and exported files for the purpose to review the history and use any of the historical files to analyze their actions or restore previously exported files – as the backup restore procedure.

Excelify.io employee may look at the imported or exported file when solving an issue for the App User – when the App User raised an issue by contacting Support or proactively when our monitoring system issues an alert that App User has repeated problems with the import or export.

Amazon Web Services, US
App User e-mails, settings, import/export job history To show to the App User their own import and export job history. E-mails – to be able to send the e-mail notifications, which are configured in the Settings. Amazon Web Services, US
E-mail correspondence To exchange e-mail messages. FastComet Hosting

Subject: Partner

Stored / Processed Data Purpose Service Provider
E-mail correspondence To exchange e-mail messages. FastComet Hosting
Contact information Be able to contact the partner and recognize them when received contact from them. Google Drive
Payment transactions Send and receive payments to and from Partners. PayPal
Accounting Do financial accounting according to Latvia legislation and accounting standards. SIA “AAT Finance”

Data Access Boundaries

The data of one App User or the Shopify store is not shared with another App User or the Shopify store.

The App functions within the boundaries of one store where it is installed.

The App of one store can import the data from the other Shopify store when App User deliberately uses the exported data file from one store and imports it into the other. The App access to the Shopify store data is always initiated, configured or scheduled by the App User.

Data Security

Excelify.io has implemented and is continuously improving reasonable measures to protect data that is processed or stored.

Website and The App communication channel over the web are encrypted using SSL certificate.

The App infrastructure is protected with strong and unique passwords, where possible – using the Public Key Infrastructure solutions.

Access to employee workstations is protected with strong passwords or in some cases with fingerprint readers.

Any destroyed data is not recoverable.

E-mail and Mass Mailing

By installing The App or contacting Excelify.io team, the Subject gives consent to receive the following e-mails from Excelify.io:

  1. Replies to Subject e-mail messages.
  2. Proactive personal e-mails to Subject when the feature that was requested by the Subject, is implemented – with the goal to inform privately that this feature is ready and the promise made by Excelify.io was delivered.

Automated and mass mailing is sent Subjects only according to the following opt-in or opt-out principle:

  1. Opt-out (assume consent to receive by default – for security reasons): Automated e-mail messages about the events within The App, like started, failed or finished jobs.
  2. Opt-in (don’t assume consent by default): Periodic e-mail of the overall Excelify.io newest features and general updates. That e-mail is sent not more frequently than once per month.

Subjects can change those settings in The AppSettings” section or ask Support.

Subject Rights

Breach Notification

In an incident when a data breach has happened despite the efforts to prevent that, Excelify.io will inform all those Subjects about the fact of such an incident and about the content of what particular data was compromised. Information will be sent not later than 72 hours after the data breach was detected.

Right To Access

When building the Excelify.io, the architecture is designed with self-service as one of the main values. That means that most of the Subject data is accessible in a self-service way. If there is still a part of data that the Subject needs access to, and which is not accessible by the self-service, the Subject can request this data from the Support.

Right to be Forgotten

Every Subject has the right to remove their data from any of the Excelify.io controlled resources, as far as it is allowed by legal or accounting limitations. Any personal data can be removed by sending a request to the Support.

Jurisdiction

Excelify.io is the product of SIA “ITissible” which is the limited liability company registered in Latvia with registration number 50103772541.

  • Legal address: Veca Bikernieku 9-3, Riga, LV-1079, Latvia.
  • Contact e-mail: [email protected]

The governing law is the legislation of Latvia.

Changes

Excelify.io owns the right to change and update this document occasionally, and review it at least once per year. If you continue using The App, then you also agree to comply with all the further versions of this document.

Change History

Date Changes
May 25, 2018 Initial effective version.
Jun 12, 2018 Removed Facebook tracking from the App and from Website.

Effective: May 25, 2018

Last update: Jun 12, 2018