These Data Processing Terms apply when a Shopify merchant installs or uses SLA Pager. By using the service, the merchant instructs SLA Pager to process the limited data described below solely to provide fulfillment-SLA monitoring and alerts.
SLA Pager processes limited Shopify store and order metadata only to identify paid orders that remain unfulfilled beyond a merchant-configured threshold, send requested alerts, and prevent duplicate alerts. The categories of data are described in the Privacy Policy.
To the extent applicable under data-protection law, the merchant determines the purpose of the monitoring and SLA Pager acts as a processor/service provider for the protected order data it processes on the merchant's behalf. SLA Pager will process that data only on the merchant's documented instructions embodied in the app settings and these terms, except where law requires otherwise.
SLA Pager applies data minimization, encryption in transit, encryption at rest through its infrastructure provider, and application-level encryption for Shopify authentication tokens. Access is limited to what is needed to operate and support the service.
The merchant authorizes the use of Cloudflare for hosting/database infrastructure and Resend for transactional email delivery. SLA Pager remains responsible for using service providers only for purposes necessary to operate the service.
Per-order alert state is retained for up to 90 days after the most recent alert. Store data is deleted following Shopify's shop-redaction workflow after uninstall. Where legally required and technically applicable, SLA Pager will assist with deletion or access requests received through Shopify's privacy mechanisms.
Service providers may process data in jurisdictions different from the merchant or customer location. Where applicable law requires transfer safeguards, the parties will rely on legally available transfer mechanisms provided through the relevant service-provider terms.
Questions about these terms or data processing can be sent to privacy@arbitr.uk.