Merchant data terms.

01. Who agrees

These terms are between Andrew Duong, operating Replumi in Ontario, Canada (“Replumi”, “we”), and the business operating the Shopify store (“merchant”, “you”). By selecting “Agree and start syncing” in Replumi, you confirm that you may bind that merchant and accept these terms. We record the terms version, store installation, accepting Shopify user ID and acceptance time. Merely opening this page does not constitute acceptance.

These terms govern our processing of merchant data. Our privacy policy explains our data practices. Shopify is not a party to this agreement. Replumi currently operates as a supervised beta; accepting these data terms does not purchase a paid subscription.

02. Instructions and permitted use

You determine the purposes for your store’s personal information and are responsible for lawful collection, notices, permissions and instructions. When processing store personal information on your behalf, we act as your service provider or processor. Installation, these terms, your app settings and verified support requests form your instructions. We will notify you if we believe an instruction conflicts with applicable data protection requirements.

You instruct us to retrieve and organize store, product, variant, location, stock and order information; calculate inventory forecasts and supplier purchasing recommendations; manage supplier catalogs, imports and purchase orders you enter; and provide support, security and privacy-request handling. Order information includes identifiers, dates, item quantities and cancellation/test status. Supplier records may include business contact details. People concerned may include store users, customers associated with order identifiers, supplier contacts and people who contact support.

We do not request customer names, email addresses, phone numbers or postal addresses for forecasting. Do not upload payment-card information, sensitive customer information or unrelated personal data. We do not sell personal information, use it for targeted advertising or cross-merchant competitive benchmarking, or make automated decisions about a customer’s legal rights or eligibility. Purchasing recommendations require your review and action.

03. Confidentiality and safeguards

We limit access to people who need it to operate and support the service and require confidentiality from anyone we authorize to handle merchant data. Production safeguards include HTTPS for external connections, an encrypted AWS storage volume, separately encrypted Shopify tokens, store-specific authorization checks, a database restricted to a local socket, and minimized operational logs.

If we become aware of a breach involving your data, we will notify you without undue delay, provide information reasonably available to us, investigate and take steps to contain and remedy it. We will cooperate with your notification obligations and Shopify’s reporting requirements. No service can guarantee that incidents will never occur.

04. Providers and international processing

You authorize the providers described in our privacy policy for their stated service purposes: AWS for hosting, Shopify for authentication and store access, Zoho Mail for correspondence, Discord for limited operational alerts, and Google Fonts for browser font delivery. We remain responsible for our processor obligations when using service providers and will require appropriate data protection commitments where they process personal information on our behalf.

The production database is hosted in Northern Virginia, United States. Other providers may process data in additional countries. We will notify merchants of material changes to providers or processing locations and provide an opportunity to raise a reasonable data protection objection before the change. Contact us if your store needs particular residency guarantees or international-transfer terms before providing affected data; these terms do not by themselves establish EU standard contractual clauses or a Canada-only hosting commitment.

05. Assistance and individual rights

We assist with verified access, correction, deletion and other applicable privacy requests, including Shopify’s mandatory privacy notifications. We provide relevant information to an authorized merchant or verified recipient, minimize identity information collected during verification, and do not use a request for another purpose. Tell us about applicable customer restrictions or consent decisions through andrew@replumi.com. We do not operate an advertising consent or data-sale program.

We will provide information reasonably needed to demonstrate our processing safeguards and cooperate with proportionate privacy assessments or audits, subject to confidentiality and protections for other merchants. Where legally permitted, we will notify you of binding disclosure requests and limit any disclosure to what is required.

06. Retention, export and termination

Raw Shopify order history is retained for up to 180 days for planning. Cleanup runs hourly while the service is operating and resumes after outages. Orders needed to prepare an outstanding privacy report may be held until that report is created; report copies remain until verified delivery or required deletion. Successful report delivery erases the report body. Minimal privacy-request evidence and deletion identifiers are retained while needed to fulfill requests and prevent deleted orders from being reimported.

Supplier catalogs, contacts, purchase orders and saved plans are retained while needed for your connected workspace. Request an export or correction before uninstalling where possible. You can end processing by uninstalling Replumi or sending a verified request. Uninstall notifications revoke stored Shopify credentials; Shopify’s store-erasure notification removes the uninstalled workspace. We will address deletion requests and retention exceptions within applicable legal and Shopify requirements.

Backups are recovery copies and are not used for ordinary processing. They expire through the backup process rather than being individually rewritten; the current process removes local dumps older than seven days after a successful backup. Outages or failed backups can delay expiry and require operator intervention. After recovery, deletion actions must be reapplied before restored data is used. Any retention required by law is restricted to that purpose.

Material changes require updated notice and, when required, renewed acceptance. This dated version remains available for reference. If Replumi incorporates, we will identify the new operator and provide notice and any required agreement update.