Clear duties for merchant data.

Agreement and scope

By installing or using BatchSlot, the merchant agrees to these terms and authorizes the processing described here and in the BatchSlot Privacy Policy. If the merchant does not agree, the merchant must not use the app and may uninstall it through Shopify Admin.

Roles and documented instructions

For personal data contained in merchant orders, the merchant acts as the controller or business and BatchSlot acts as the processor or service provider. The merchant instructs BatchSlot to process only the minimum order data required to allocate selected product quantities to production batches, release capacity, maintain the waiting queue, verify plan limits, and handle privacy requests.

BatchSlot will not sell this data, use it for advertising, or process it for an unrelated purpose. Additional instructions require written agreement.

Processing details

Processing lasts while the app is installed and only as long as each record is operationally required. It concerns Shopify order identifiers, order numbers, selected product quantities, shop identifiers, and related batch allocation or queue status. It does not require customer names, email addresses, postal addresses, payment card data, or payment details.

Retention periods and the categories of merchant account and support data are described in the Privacy Policy.

Confidentiality, security, and service providers

BatchSlot restricts access to people and providers that need it to operate the service and requires confidential handling. Production data is encrypted in transit using TLS and stored on encrypted infrastructure. Shopify provides the commerce platform and authentication; Railway provides application and database hosting. These providers process data only to deliver their services under their applicable contractual terms.

BatchSlot will notify affected merchants without undue delay after confirming a personal-data breach involving BatchSlot systems, to the extent permitted by law and available contact channels.

Requests, return, and deletion

BatchSlot processes Shopify's required customer data request, customer redaction, and shop redaction webhooks. We will reasonably assist merchants with requests relating to data processed by BatchSlot. On uninstall, stored shop data is deleted, subject only to a legal requirement to retain specific information.