Data Processing Terms — Loviqo Customer Hub
Last updated: 4 October 2026
These Data Processing Terms form part of the agreement governing a merchant’s installation and use of Loviqo Customer Hub. “Merchant” means the Shopify merchant using the app. “Loviqo” means Luís Miguel da Costa Ferreira, a sole trader registered in Portugal operating under the commercial name BRANTSI. Contact: hello@brantsi.com.
1. Roles and instructions
Where Loviqo processes personal data about a merchant’s customers on the merchant’s behalf, the merchant acts as controller/business and Loviqo acts as processor/service provider, as those concepts apply under relevant data-protection law. Loviqo processes that data only on the merchant’s documented instructions expressed through installation, configuration and use of the app, except where law requires otherwise.
2. Processing details
- Subject matter: operation of Loviqo customer-account, post-purchase and merchant administration features.
- Duration: for the merchant’s use of Loviqo and the retention periods described in the Data Retention Policy, subject to deletion/redaction obligations.
- Nature: collection from Shopify APIs/webhooks, storage, retrieval, organization, calculation, display, update, deletion and anonymization.
- Purposes: customer service, store/order operations, app functionality and customer-specific account experiences selected by the merchant.
- Data subjects: merchant customers, prospective customers or visitors only where an enabled Loviqo feature creates or processes a relevant record.
- Data categories: Shopify customer and commerce identifiers, order/fulfillment/return state, app feature records and related operational metadata. Loviqo does not request protected Name, Email, Phone or Address fields in its current Partner access request.
3. Confidentiality and security
Loviqo applies technical and organizational safeguards appropriate to the service, including authenticated access, tenant isolation, encrypted transport, managed encrypted storage, token hashing, webhook authentication, least-data design and controlled production access.
4. Subprocessors
The merchant authorizes Loviqo to use service providers required to operate the app, including Shopify and managed cloud hosting/database providers. Loviqo remains responsible for selecting providers appropriate for the processing and for using them under applicable contractual protections.
5. Data-subject and merchant requests
Taking into account the nature of the processing, Loviqo provides mechanisms intended to assist merchants with access and deletion obligations, including Shopify mandatory privacy webhooks, authenticated export preparation, customer redaction and shop redaction.
6. Deletion and return
Loviqo deletes or anonymizes customer-linked app records when required by authenticated Shopify privacy events and deletes tenant-scoped data through the shop-redaction lifecycle. Additional timed retention rules apply to short-lived and support data as described in the Data Retention Policy. Records that must be preserved temporarily for transaction integrity or legal obligations are minimized and separated from active feature use where practicable.
7. International processing
Shopify and infrastructure providers may process information in multiple jurisdictions under their applicable transfer mechanisms and contractual terms. Loviqo configures production services with regional controls where available and does not intentionally move production customer data into development environments.
8. Audits and information
Loviqo maintains technical release, privacy-request and operational evidence intended to demonstrate the controls described in these terms and will provide reasonable information needed for a merchant to assess the app’s processing, subject to security and confidentiality restrictions.
9. Precedence
If these Data Processing Terms conflict with other service terms specifically concerning processing of merchant customer personal data, these Data Processing Terms control for that processing.