Privacy policy
Amendora is a Shopify app by LooLon that lets a store's customers change their orders. This policy explains what data Amendora processes for merchants and their customers.
Customers of the store
- Orders – to show the change page and make the change, Amendora reads the order from Shopify, including the name, email, phone and shipping address on it. These details are not copied into Amendora's database and stay in Shopify.
- What Amendora stores – the order number, Shopify's customer ID, what changed in the order (products, quantities and amounts, or the fact that an address or contact details changed), and the cancel reason a customer chooses.
- Payments – payments and refunds are handled by Shopify. Amendora never sees card numbers.
- Emails – Amendora sends service emails in the merchant's name: a link to change the order, and a confirmation after a change. Each link is signed, only works for that order and expires.
- Amendora uses no advertising or tracking cookies.
Merchants
- When a merchant installs Amendora, we store the shop domain, the store name and contact email, and the access token Shopify gives the app.
- Billing for Amendora is handled by Shopify. We receive no card or bank details.
Where data is processed
Amendora's server runs in the European Union (Germany). Emails are sent through Google Workspace. Shopify stores orders and customers under its own privacy policy.
Security
- All traffic uses HTTPS (TLS). Daily backups are encrypted (AES-256), kept for 30 days and then deleted.
- Only the Amendora developer can access store data, for support. Every such access is logged. Server access uses SSH keys only.
Security incidents
If we learn of a security incident that affects personal data, we contain it immediately, investigate it and notify the affected merchants without undue delay, within 72 hours at the latest.
Deletion
- When Shopify asks to delete a customer's data, Amendora removes that customer's change history.
- When a merchant uninstalls Amendora, the app loses access immediately. All data for the store is deleted after Shopify's shop-redact request, 48 hours after uninstalling.
Your rights
Customers can ask the store they bought from to access or delete their data. Anyone can write to contact@loolon.com with a privacy question.