Data processing summary

Fleeta Limited processes authorised Shopify store data to provide scans, recommendations, experiments, reporting, support, security, billing enforcement, and deletion.

Order queries select line, total, currency, timestamp, discount, and refund facts needed for measurement. Customer names, emails, phone numbers, postal addresses, payment data, and free-form order notes are excluded from product queries and normalized commerce records. Shopify's mandatory privacy webhook can still supply email or phone inside the exact authenticated body. That body is encrypted for durable compliance processing, is not parsed into product data or exposed in reports/exports/logs, and is scrubbed on completion within the 30-day compliance window.

A person who chooses to use the public support form supplies a name, email, store URL, issue description, and optionally one bounded attachment. Content is encrypted and attachments remain quarantined until a reviewed safety decision. Open content is kept no later than 90 days after receipt and no later than 30 days after resolution, whichever comes first. A submitted URL is never fetched and does not become tenant authority by itself.

Shopify supplies the commerce platform. The Fleeta dedicated hosting environment provides application, PostgreSQL, backup, and monitoring services. OpenAI is optional and receives minimised, non-customer context with response storage disabled.

Fleeta applies access control, encryption, tenant isolation, backups, monitoring, dependency review, and incident procedures proportionate to the service. Merchants will be notified of qualifying incidents as required by law.

Exportable merchant records can be supplied on a verified request. Uninstall or verified deletion triggers tenant cleanup, subject to short backup expiry and records that law requires Fleeta to retain.