Data Protection Agreement

Yagi POS Cart Helper - Data Protection Agreement

Yagi POS Cart Helper "the App” provides cart storing and retrieval, cart conversion to / from draft order service "the Service" to merchants who use Shopify to power their stores. This Data Protection Agreement describes what data is collected, used, and stored in database when you install or use the App in connection with your Shopify-supported store.

Personal Information the App Collects

When you install the App, we are automatically able to access certain types of information from your Shopify account:

Your shop name and shop contact email, this is only used for support and emergency contact purpose.

Your shop's location ID and name, this is only used for identifying the location of the POS which the cart is saved.

Draft Orders data, including line items and customer ID, this is only used for the app to function, when you convert draft order to cart, or vice versa.

Customers data which is limited to Customer ID and name, this is only used for display purpose, to identify which customer the carts belong to.

Draft Order Information the App Collects

For certain app functions, the app collects information from the draft order, including the line item quantity, line item properties, product ID, product name, product image, product price, variant ID, variant name, variant SKU , inventory item ID, draft order ID, customer ID, draft order notes and draft order tags.

From the information above, only the product ID, variant ID, customer ID (if there is customer attached to the draft order), and draft order ID are stored in the app database, for future identification and access purpose, no other data from the draft order is stored in the app database.

Customer Information the App Collects

When you use the app functionality to save cart on POS, or convert draft order to cart, the app collects the customer information (if there is customer attached to the cart or draft order), including customer ID and customer name.

These customer information is used to display on the carts list when merchant view the saved carts, to easily which cart belongs to which customers.

Only the numerical identifier of the customer (customer ID) is saved in the database, other customer information (customer's name) is never stored in the app database, the app will request these information from Shopify every time merchant view the saved carts, and they will be discarded once the list of saved carts is generated and displayed, these information are only kept in ephemeral Random Access Memory (RAM) during the generation of saved cart(s).

Data Retention Period

For personal identifiable customer data (customer name), the data is discarded immediately right after the saved cart list is generated, this data is never stored in the database. As for the customer ID (unique numerical identifier), the data is stored in database until the cart is deleted, or retrieved on the POS to checkout.

For the draft order data, the data is stored in database until the cart related to the draft order is deleted, or is used to checkout.

For the store data (store name and store contact email), the data is stored in database until the user uninstalls the app.

For other data that is not mentioned above, they will be purged after 30 days from the database since its creation date.

Data Security

We use HTTPS / TLS 1.3 (AES_128_GCM_SHA256) to encrypt the data in transit for the app, no personally identifiable customer data is ever stored in the database. The database only store the following data : your shop name, your shop contact email, you shop location IDs, product ID, variant ID, inventory item ID, draft order ID, quantity of line items and customer ID.

Changes

We may update this data protection agreement from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at axel@yagisoftware.com or by mail using the details provided below:

Level 30, No.1, Jalan Pinang, 50450 Kuala Lumpur