Maddy: B2B Company · by MaddySpace

Terms and data processing

Last updated 15 October 2026

These terms apply to merchants who install Maddy: B2B Company ("the app"), made by MaddySpace ("we"). By installing the app you accept them, together with Shopify's terms for apps.

The service

Data processing

This section is the data processing agreement between you (the controller) and us (the processor) for personal data the app processes on your behalf. The data and how long it's kept are listed in our privacy policy.

  1. Instructions. We process personal data only to provide the app, as you configure it, and as the law requires. We don't sell it, use it for our own purposes or for advertising.
  2. Confidentiality. Only our staff who need access to run or support the app can access it, and they're bound to keep it confidential.
  3. Security. We protect it with encryption in transit and at rest, a database that isn't reachable from the internet, key-only server access, two-factor authentication on our accounts, daily backups and access logs.
  4. Sub-processors. Oracle Cloud Infrastructure hosts the app. Emails go through the email provider you connect. We tell you in the app before adding a sub-processor, and you can uninstall if you object.
  5. Your customers' requests. Customer data and erasure requests reach us through Shopify and the app answers them automatically. We help with anything else you need to answer a request.
  6. Breaches. We tell you without undue delay, and within 72 hours of finding a breach affecting your data, with what happened, the data involved and what we're doing about it.
  7. Deletion. When you uninstall, all your store's data is deleted 48 hours later. Backups that contain it are overwritten within 14 days.
  8. Information. On request we give you the information you need to show this processing follows data protection law.
  9. Transfers. Data may be processed outside your country. We protect it the same way wherever it's processed and, where the law requires, rely on the safeguards it provides.

Contact

Questions about these terms or your data: sprajapat770@gmail.com.


Privacy policy · Terms and data processing