Terms and Data Processing Agreement

Version 2026-10-13. This agreement is between the merchant accepting it for its Shopify store and ProofRelay’s operator, Dijital Pilot, Ali Köker, Antalya, Türkiye. Contact: [email protected].

The approval service

ProofRelay provides design proofs, version history, customer decisions and a production-readiness check. The merchant is responsible for the accuracy of the design, its rights to uploaded materials, communicating with customers and deciding when to manufacture or fulfil an order. An app approval does not transfer intellectual-property rights or replace the merchant’s product, refund or consumer obligations.

The Free plan remains available. Paid plans, limits and billing periods are displayed before selection and billed through Shopify. Revisions use storage without counting as new jobs. There are no automatic overage charges. The merchant can change plans or uninstall through Shopify; its applicable billing rules govern resulting charges.

Processing instructions and roles

The merchant determines the purposes and lawful basis for processing its customers’ data. We process the information described in the Privacy Notice only to deliver this service on the merchant’s instructions, or when legally required. The merchant must provide appropriate customer notices and obtain any consent its use requires. Upload only information needed for a design approval.

Processing covers storing and displaying proofs, recording customer decisions and feedback, checking order changes, exporting requested records, and deleting records. Customer information may appear in images or notes supplied by the merchant or customer. We do not sell it or use it for advertising, AI training or significant automated decisions.

Confidentiality, providers and security

Access is restricted to authorised store users, intended review-link recipients and operators with a service need. We use HTTPS, protected server credentials, encrypted infrastructure storage and encrypted recovery snapshots. Oracle Cloud Infrastructure hosts the application in Frankfurt; Cloudflare supplies network delivery and protection. Those providers process data only as needed for their services. Contact us before using the service if your store requires an additional transfer arrangement or processing restriction.

Requests, incidents and ending the service

We assist the merchant with access, correction and deletion requests through the app, Shopify’s privacy webhooks and support. We notify affected merchants without undue delay after confirming a security incident involving their data and provide available information needed to respond. Contact our support address to request further processing or security information.

Proof records expire after 365 days from creation; completed data requests expire after 30 days. On uninstall, review access is revoked; Shopify’s mandatory shop-redaction request deletes remaining tenant data. Recovery snapshots expire after seven days. Before restoring service from a snapshot, applicable deletion requests must be reapplied. The merchant should export information it needs before expiry or uninstalling.