Data Processing Addendum
Pod.AI — AI customer chat for Shopify stores · Last updated: 9 November 2026
This Data Processing Addendum ("DPA") forms part of the Terms of Service between the merchant using Pod.AI ("Merchant", controller) and Dropking AI ("Processor"). It applies to personal data of the Merchant's customers that Pod.AI processes on the Merchant's behalf (Art. 28 GDPR; Swiss FADP). By installing the App the Merchant accepts this DPA.
1. Subject matter and duration
Providing the Pod.AI storefront chat, order-status answers and handoffs to the Merchant's team, for as long as the App is installed, plus the deletion periods below.
2. Nature, purpose and data
| Data subjects | Data categories | Purpose |
|---|---|---|
| Store visitors and customers using the chat | Chat messages, e-mail address and order number when provided, order status / tracking (read live from Shopify), language, page URL, random chat ID | Answering questions, order lookups, handing conversations to the Merchant's team |
| Merchant staff | Shopify staff user ID in the access log | Access logging / security |
3. Processor obligations
- Process personal data only on the Merchant's documented instructions (the App's configuration and these terms), never for own purposes, advertising or sale.
- Ensure persons with access are bound to confidentiality.
- Implement the technical and organisational measures in section 6.
- Assist the Merchant with data subject requests (Shopify
customers/data_requestandcustomers/redactare handled automatically) and with security, breach-notification and impact-assessment duties. - Notify the Merchant of a personal data breach without undue delay and within 72 hours, as set out in the Security & Incident Response Policy.
- Delete all Merchant data after uninstall (Shopify
shop/redact, 48 hours after uninstall), except where law requires retention; encrypted backups expire within 14 days. - Make available information necessary to demonstrate compliance and allow reasonable audits (normally by written questionnaire).
4. Sub-processors
The Merchant authorises the sub-processors listed in the Privacy Policy (section 4): hosting in Germany (Frankfurt), Shopify, carrier tracking APIs (tracking numbers only) and, only if the Merchant enables LLM answers, the configured LLM provider. We impose equivalent data-protection obligations on them and will announce changes on the Privacy Policy page; the Merchant may object by uninstalling the App.
5. International transfers
Data is stored in the EU (Germany). Transfers to sub-processors outside the EU/EEA/Switzerland rely on an adequacy decision or the EU Standard Contractual Clauses (with the Swiss addendum).
6. Technical and organisational measures
- AES-256-GCM encryption at rest of all App records and of daily backups (14-day retention); TLS in transit.
- Per-shop data separation; access only via Shopify session tokens, app-proxy signatures or HMAC-verified webhooks; server administration restricted to Dropking AI administrators.
- Append-only access log of all personal-data access (12-month retention), without logging the data itself.
- Data minimisation: read-only scopes, live order reads (no order copies), no card data, automatic deletion after 12 months of inactivity.
- Incident response with 72-hour merchant notification (policy).
7. Contact
Processor: Dropking AI. Privacy and security contact: support@swisspro.site.