Technical & Compliance FAQs

1. Does the app store any personal customer data (like names, emails, shipping info)? Where is this data stored?

Answer: No. Our app does not store or process any end-customer information such as names, emails, or shipping details.

All checkout and customer data are handled entirely by Shopify’s secure infrastructure.

As a Shopify Checkout Extension, our app is technically restricted from accessing or storing this type of personal data, ensuring full compliance with Shopify’s privacy and security standards.

2. Do you offer a Data Processing Agreement (DPA) to cover GDPR compliance?

Answer: Yes. By installing our app, merchants automatically agree to Shopify’s standard data processing framework and scopes defined during the installation process.

This covers the data processing relationship between your store, our app, and Shopify, ensuring compliance with GDPR and other data protection regulations.

If you need a copy of the agreement or clarification on data scopes, please contact our support team.

3. What is the protocol for notifying merchants in the event of a data breach?

Answer: In the unlikely event of a data breach, we will promptly investigate the incident and notify all affected merchants as soon as possible, following the applicable data protection and privacy regulations (e.g., GDPR). Notifications are sent via email and in-app announcements, along with details on the scope of the breach, affected data, and recommended next steps.

4. Is your app compatible with the Shopify Plus feature of Script Editor (Ruby)?

Answer: **Yes. Our app is fully compatible with **Shopify Plus features.

It supports both Checkout UI Extensions and Script Editor functionality through Theme App Extensions, which are used in our Dynamic Payment Button feature.

This allows merchants on Shopify Plus to customize payment behavior while maintaining Shopify’s secure checkout framework.

Updated on: 30/10/2025