Merchant data processing agreement

Version 18 October 2026. These terms describe how BeautyBOGOs processes information on behalf of a merchant using its Shopify app. Contact: support@salonkart.com.

Merchant instructions and roles

The merchant determines the purposes and lawful basis for processing customer information in its store. BeautyBOGOs acts on the merchant’s instructions to configure promotions, deliver gifts, attribute promotion activity, reverse cancelled-order analytics and fulfill privacy requests. Instructions consist of the app’s documented functionality and authenticated merchant configuration. We do not use that information for unrelated advertising or sell it.

Scope and safeguards

Processing covers the data categories, purposes and retention periods in the privacy notice. Access is restricted to authorized personnel and providers who need it to operate, secure or support the service. Shopify provides the commerce platform; Railway provides application/database infrastructure. We use providers only for service delivery and remain responsible for the processing we instruct them to perform, subject to applicable law.

Requests and incidents

We support the merchant in responding to access and deletion requests through the authenticated Privacy screen and Shopify compliance webhooks. The merchant verifies the requester and securely delivers exports before acknowledging delivery. If we become aware of a personal-data incident affecting a merchant, we will notify the merchant without undue delay using its available contact channel, provide known information and cooperate with remediation and legally required responses.

Retention, end of service and recovery

Promotion analytics expire after 90 days from collection, subject to the privacy-request holds and related-record mapping rules in the privacy notice. Completed request records expire after 365 days; keyed replay-prevention records remain minimal. Daily recovery backups expire after six days. A restored database must pass erasure reconciliation and retention cleanup before returning to service.

After uninstallation, Shopify’s verified shop-redaction request triggers removal of shop data. A conflicting active installation is investigated before deletion to protect a reinstalled merchant. Merchants may contact support about export or deletion. Neither party’s obligations under applicable privacy law are reduced by these terms.

Service terms

The app is free for now. Any future paid offering requires separate notice and authorization through Shopify. Merchants are responsible for promotion settings, inventory, applicable taxes/shipping and their customer-facing terms. Support is available at the address above. These terms do not authorize changes to another app or store outside the merchant’s explicit instructions.