Data Processing Addendum
How Floq processes shopper personal data for the merchants who install it.
1. Scope and roles
This addendum forms part of the Terms of Service between the merchant ("you", the controller) and Shrey Techcorp Pvt Ltd, a company with its registered office at (to be confirmed) (company number (to be confirmed)) ("Floq", the processor). It applies to personal data about shoppers and customers of your store that Floq processes to provide the service. Where a law uses other terms (such as "business" and "service provider"), those terms apply accordingly. If this addendum and the Terms conflict on personal data, this addendum wins.
You accept this addendum by installing Floq. (to be confirmed)
2. Details of processing
| Subject matter | Providing Floq: showing live shoppers, suggesting and delivering help in your store, and checking outcomes against Shopify's records. |
|---|---|
| Duration | While Floq is installed, and until deletion after uninstall as described below. |
| Data subjects | Shoppers who visit your online store, and your customers. |
| Categories of data | Pseudonymous browser identifiers; pages, searches, products and cart contents; device, browser and a language-derived country; for logged-in shoppers: Shopify customer ID and order details (items, totals, marketing consent). No names, email addresses, phone numbers or addresses. |
| Special categories | None intended. You must not configure Floq to collect them. |
| Purposes | As set out in the Privacy Policy under "How we use data". |
3. Floq's obligations
- Process personal data only on your documented instructions, which are these terms and the settings you choose in Floq, unless the law requires otherwise; in that case we tell you first where the law allows.
- Not sell or share the data, not use it for anyone else's benefit, and not combine it with other data except to provide the service. The aggregated, de-identified statistics described in the Privacy Policy contain no personal data. (to be confirmed)
- Make sure everyone with access is bound by confidentiality.
- Apply the security measures in section 6.
- Help you answer data subject requests. Shopify relays them to Floq: Floq deletes a customer's records when Shopify sends a customer deletion request, and records each data request so you can export the customer's data from Floq.
- Help you with impact assessments and consultations with authorities where they are required.
4. Personal data breaches
Floq will notify you without undue delay, and within 72 hours, after becoming aware of a personal data breach affecting your data. The notice will describe what happened, the data and shoppers affected, the likely consequences and what we are doing about it, and we will update you as we learn more. (to be confirmed)
5. Sub-processors
You authorise Floq to use the sub-processors below. Floq binds each one to data protection terms at least as protective as this addendum and remains responsible for them. Floq will list a new sub-processor here at least 30 days before it receives personal data. If you object on reasonable data protection grounds, tell us; if we can't resolve the objection, you may end the agreement by uninstalling Floq. (to be confirmed)
| Sub-processor | Purpose | Data shared | Location |
|---|---|---|---|
| Shopify Inc. | The platform Floq runs on: installs the app, sends Floq store and shopper data, and handles all billing. | Store, order and customer records within the access the merchant grants; the customer events described in the Privacy Policy. | Where Shopify processes store data (see Shopify's privacy policy) |
| Railway Corporation | Hosts the Floq app, its PostgreSQL database and its Redis cache. | All data described in the Privacy Policy, stored and processed on Floq's behalf. | United States (us-east4, Virginia) |
| Cloudflare, Inc. | Runs the AI model (Workers AI) that judges whether stepping in would help a shopper. | A de-identified summary of one visit in labelled ranges: the stage of the visit, cart value and time on the page as ranges, device, traffic source type, whether the shopper searched, and whether they are a returning customer. No names, contact details, customer or browser identifiers, search terms, campaign names or store name. | Cloudflare's global network |
| OpenRouter, Inc. | Routes two AI requests: a second model that judges whether to step in when the first doesn't answer in time, and the model that writes the one-sentence explanation a merchant sees on a suggestion. | The same de-identified summary; for explanations, short factual notes about a visit (for example the cart stage and the products viewed) with no names, contact details or identifiers. | United States |
| Groq, Inc. | A back-up language model for the one-sentence explanation, used only when the model reached through OpenRouter fails. | The same short factual notes about a visit, with no names, contact details or identifiers. | United States |
| Functional Software, Inc. (Sentry) | Error monitoring for the Floq app. | Technical details of an error. Addresses are reduced to the route, with no query string, headers or body, and shop domains and shopper identifiers are removed from error text. | United States |
6. Security measures
- Encryption in transit (HTTPS) for every connection to Floq.
- Shopify webhook signatures verified before any request is acted on; storefront requests rate-limited per store, per browser and per IP address.
- Access tokens deleted on uninstall; API keys stored only as hashes.
- AI models receive de-identified summaries and short factual notes only: no names, contact details or identifiers.
- Error reports carry no store or shopper identifiers: addresses are reduced to the route, and shop domains and shopper identifiers are removed.
- The database, cache and backups are hosted by Railway in the United States and encrypted at rest; connector credentials are additionally encrypted by Floq with AES-256-GCM. Backups run daily and are kept for up to 30 days. Production access is limited to named staff using multi-factor authentication, and access is logged. (to be confirmed)
7. Retention, deletion and return
Stored shopper event history is deleted automatically after the plan's history window (7 days on Free and 90 days on Pro). On uninstall Floq stops processing storefront data and deletes access tokens and short-lived data at once. When Shopify sends the shop-deletion request, 48 hours after uninstall, Floq deletes all personal data it holds for your store from its database and cache. Before uninstalling you can export customer data for any open data request from Floq. Deleted data may remain in backups for up to 30 days, until those backups expire.
8. Audits
Floq will give you the information reasonably needed to show it meets this addendum. Where that is not enough, you may audit Floq, at your cost, once a year and on 30 days' written notice, through an independent auditor bound by confidentiality, in a way that doesn't disrupt the service or reveal other merchants' data. (to be confirmed)
9. International transfers
Floq and its sub-processors process data in the locations listed in section 5. (to be confirmed)
10. Liability
Each party's liability under this addendum is subject to the limitation of liability in the Terms, except where the law does not allow it to be limited. (to be confirmed)