1. Agreement
These terms are an agreement between you, the merchant installing the app (“you”), and Somix Lab (“we”). By installing Somix Related Products on your Shopify store you accept them. If you do not accept them, uninstall the app.
Sections 5 to 10 form a data processing agreement covering the personal data the app handles on your behalf.
2. What the app does
Somix displays product recommendations on your storefront — related products, complementary items, and buy-together bundles — and reports how they perform. It renders through a Shopify theme app extension. It does not modify your theme’s files, and it uses no Asset API or ScriptTag.
3. Your responsibilities
- Keeping your Shopify account secure, and deciding who on your team may configure the app.
- The accuracy of what you configure — which products are recommended, and any discount you attach to a bundle.
- Complying with the law that applies to your store, including telling your own customers what data you collect. The app gives you the facts you need for that; see the privacy policy.
4. Plans and payment
The app has a free plan and a paid plan. All charges are handled by Shopify through Shopify App Pricing and appear on your Shopify invoice. We never take payment details and never bill you directly.
You can change or cancel your plan at any time from your Shopify admin, without contacting us. Uninstalling the app cancels the subscription. Refunds follow Shopify’s own policy.
5. Roles
For the personal data described below you are the controller and we are the processor. We process it only to provide the app, and only on your instructions — installing the app and configuring a widget being those instructions.
6. What we process, and what we keep
The app requests the read_orders permission for one purpose: attributing revenue to the widget that produced a sale.
When a shopper adds items from a Somix widget, the storefront writes a line item property naming that widget. When the order is created, Shopify notifies us and we read that property back. Attribution is a direct lookup — no order is matched by timing, by product, or by anything about the shopper.
From each order we store exactly five values:
- the order’s Shopify id
- which widget the sale came from
- the amount attributed to it
- the currency
- the date it was created
Shopify’s notification also contains your customer’s name, email address, shipping address and phone number. We do not store any of them. They are discarded with the rest of the message once the five values above are taken. No field capable of identifying a person exists in our database.
Widget impressions, clicks and add-to-cart events are counted in the shopper’s browser and sent to us as totals. They carry no cookie, no identifier, and nothing that distinguishes one shopper from another, and nothing is sent at all unless your store’s consent settings allow analytics.
7. How long we keep it
Attribution records are deleted automatically after 180 days. What remains is a daily total per widget — a count and a sum — which cannot be traced back to an order or a person.
When you uninstall, Shopify notifies us and we delete your store’s cached data immediately and its stored records within 48 hours. You may also ask us to erase your data at any time, whether or not the app is still installed.
8. Security and confidentiality
Access tokens issued by Shopify are held encrypted at rest and used only for the API calls the app needs. Data is transmitted over TLS. Anyone with access to it is bound by confidentiality.
We do not sell your data, do not share it with advertisers, and do not use it to train anything. If a breach affecting your data occurs, we will tell you without undue delay.
9. Sub-processors
We use a small number of infrastructure providers to run the app — for hosting, for the database, and for caching. They process data only to provide that infrastructure and are bound by their own data protection terms. We will tell you before adding a sub-processor that materially changes how your data is handled.
10. Requests from your customers
If one of your customers asks what data we hold about them, or asks for it to be deleted, Shopify passes that request to us and we answer it. In practice the answer is usually that there is nothing to return, because we store no field that identifies a person. We will assist you with any such request at no charge.
11. Availability
We work to keep the app available and correct, but it is provided as is, without warranty. We do not guarantee uninterrupted service, and we are not responsible for outages at Shopify or at our infrastructure providers.
12. Liability
To the extent the law allows, our total liability to you under these terms is limited to what you paid us for the app in the twelve months before the claim. We are not liable for indirect or consequential loss, including lost profits or lost sales.
13. Ending the agreement
You may end this agreement at any time by uninstalling the app. We may end it if you breach these terms or use the app unlawfully, and will give reasonable notice where we can. Sections 5 to 10, 12 and 14 survive.
14. Changes
We may update these terms. The date at the top shows when they last changed, and we will give notice of material changes before they take effect. Continuing to use the app after that means you accept the updated terms.
15. Contact
Questions about these terms, or about data held for your store: support@somixlab.com