Merchant data protection agreement

This agreement covers Shopify customer data used by MessageFit, operated by acceleroi OÜ. The merchant controls the purposes and lawful basis; acceleroi OÜ processes the data on the merchant’s instructions to provide the installed app.

Scope and instructions

The service reads recent order totals, purchased products and customer identifiers to group orders into purchase cohorts. Identifiers and individual order records are used only during analysis and are not retained. Saved insights contain aggregate counts and order-value proxies. The app does not request customer names, emails, phone numbers or addresses for this analysis. The merchant’s authorized use of the analysis feature supplies the processing instruction. We will inform the merchant if an instruction appears unlawful and suspend the affected processing.

Limited use and security

We process customer data only to provide these features, keep authorized operators subject to confidentiality, encrypt data in transit and at rest, and restrict service access. We do not sell customer data, use it to train our own models, or use it to make automated decisions about individual people with legal or significant effects.

Providers and transfers

The merchant authorizes Vercel for hosting, Neon for the application database and Anthropic for Claude generation and review. Shopify supplies store APIs and authentication. Claude receives product facts, merchant messaging, a selected profile and aggregate insights; it does not receive individual orders, customer identifiers or Shopify tokens. Providers may process data internationally under their commercial data-protection terms and applicable transfer safeguards. We remain responsible for our providers’ processing under this agreement and will notify the merchant of a replacement or new provider before using it for customer data. A merchant may object through the support contact; if the objection cannot be resolved, the affected feature can be stopped and the app uninstalled.

Retention and assistance

Aggregate purchase insights expire after 30 days. Generation input snapshots are cleared on completion and interrupted inputs after ten minutes by the scheduled worker. Product drafts and original-description snapshots remain while installed for merchant review and rollback. Signed Shopify uninstall and redaction notifications delete active records as described in the privacy notice. Provider backups follow provider retention; restored data must be reconciled against deletion requests before returning to service.

We assist merchants with verified access, correction, deletion, security and impact-assessment requests relating to our processing. We notify affected merchants without undue delay after confirming a personal-data breach and provide information needed to assess it. We make available information reasonably needed to demonstrate our compliance with these commitments and cooperate with proportionate verification requests. On termination we delete active app data, except information required by law, and explain any applicable exception.

Merchant responsibilities and contact

The merchant remains responsible for customer notices, lawful instructions and any required consent or opt-out decisions. Do not put personal customer details in free-text messaging. Contact denis@acceleroi.com for a data request, provider objection or questions about this agreement. The privacy notice supplies further service details. This version is dated October 10, 2026.