Data security and privacy statement

Overview

The aim of this documentation is to cover all of the relevant information about the Data Security & Privacy Statement of Alpha Serve to help our customers see clearly what we do and really don't do with their data.

Introduction

Protecting your data and your privacy is our highest priority and is very important for us. Alpha Serve adheres to a strict policy for ensuring the security and privacy of your data, in particular, your personal information (such as full name, address, email address, and/or other identifiable information, collectively such personally identifiable information Personal Data).

This Data Security and Privacy Statement will provide you with an overview of the collection and processing of your data for Shopify Apps.

In the following, all data created by a Shopify App end-user are defined as Customer Data.

Data Security and Privacy of Our Apps

We support the latest technical and organizational measures to ensure data security, in particular, to protect your Personal Data. These measures are updated on a regular basis to stay up to date. We would like to draw your attention to the fact that security gaps are possible when transmitting data on the Internet, and it is impossible to ensure complete protection of data from unauthorized or malicious access by third parties. If you are interested in our data protection concept, please contact us.

We draw your attention to the fact that we do not collect, store or process any personal/ confidential information in applications suitable for Atlassian products, nor do we collect, store or process any analytical or tracking data, but nor do we place cookies or tracking beacons in any applications suitable for Atlassian products.

For several applications, we use the option to include YouTube videos to the AppStore product pages, allowed by Shopify. All the videos used on the mentioned pages are stored on www.YouTube.com. In general, this means that some of your user data can be transmitted when you are playing these videos. We are not able to influence or prevent this data transfer. If you don’t want this data transfer, avoid playing the videos.

We may use the option of Google Analytics integration to our AppStore product pages, allowed by Shopify. Please, note that all such information is anonymized, no personal data can be received or identified. We may use this information to analyze user experience for continuous product improvement.

Some of our applications depend on the use of personal data, such as usernames and email addresses. All this information is used by the application for internal functional purposes only. Please, pay special attention that the app does not collect, process or store any commercial data of the customer. 

The following data only is being processed on our side:

• Shopify shop id

• myshopify_domain

• Shopify Access Token to make requests to the Shopify API

Some of our applications depend on the use of personal data, such as usernames and email addresses.We do not collect, process or store any personal data, except the data provided to Shopify during licence purchase (company name, myshopify_domain, Shopify plan, contact email, contact phone number, country name). This data is stored by Shopify, not by Alpha Serve.

We draw your attention to the fact that we do not collect, store or process any personal/confidential information in applications, nor do we collect, store or process any analytical or tracking data, but nor do we place cookies or tracking beacons in any applications.

Data Access

We support the latest technical and organizational measures to ensure data security. These measures are updated on a regular basis to stay up to date. We would like to draw your attention to the fact that security gaps are possible when transmitting data on the Internet, and it is impossible to ensure complete protection of data from unauthorized or malicious access by third parties.

Only authorized Alpha Serve employees and subcontractors from our support and development teams have access to Customer Data. Such subcontractors are contractually bound to the same data security and privacy standards that apply to us.

Data Hosting

All the customer data is hosted, stored and processed by Shopify.

Our apps create a request for data based on parameters provided by the customer. Shopify prepares a dataset and provides it via URL to Alpha Serve. The app uses the URL to provide the requested data to the customer. Thus, Alpha Serve does not store or process your data, we just transfer it. You can find more about it here.

We store the URL only, which is valid for a week only. Currently, we are changing the approach to the data storage to make the encryption more secure and will finalise this in the nearest weeks. 

Customer Payment Data

All the customer payments for the app are processed via Shopify. We are not a part of this process.

Our app does not collect any payment information about the users.

We may store your billing information (company name, country) only to fulfil the requirements of the local tax legislation. We are not able to influence this data storage.

Email Addresses Processing Terms

We do not store user email addresses. We do not use email addresses in the UI.

Customers of Our Apps

By purchasing an app license, our customers accept the following:

• Alpha Serve may process personal information during the active maintenance period and after the expiration of the last maintenance period.

• Alpha Serve may send emails containing product news, tips, best practices, webinar or training details, event-related information.

• To comply with GDPR regulations, customers can request the removal, rectification or review of their own personal information stored in the support system by sending an email to support@alpha-serve.com or by clicking the unsubscribe link in the emails received.

Access to Customer Data

Only authorized Alpha Serve employees and subcontractors from our support and development teams have access to Customer Data. Such subcontractors are contractually bound to the same data security and privacy standards that apply to Alpha Serve.