Terms of Service & Data Processing Agreement

Last updated: August 1, 2026

This agreement applies between the merchant installing OrderLink Up ("you," "the merchant") and OrderLink Up ("the app"). By installing the app, you agree to these terms. See our Privacy Policy for how we handle personal data in more detail — this page covers the contractual side of that relationship.

1. Service description

OrderLink Up imports order data you provide (via CSV or Excel upload) into your Shopify store, creating draft or completed orders through the Shopify Admin API. That's the whole service — the app does not modify your storefront, theme, or checkout.

2. Data processing roles

For any personal data contained in the files you upload (customer name, email, phone, address), you are the data controller and OrderLink Up acts as a data processor, processing that data only on your instructions and only for the purpose of creating the orders you asked to import. We do not use it for any other purpose.

Sub-processors: we use Supabase (database hosting) and Railway (application hosting) to run the service. Both process data solely as infrastructure providers on our behalf, under their own standard security commitments; neither has access to your Shopify store directly.

3. Data retention

Import records, including any personal data they contain, are retained for 24 months from creation and then automatically deleted, or deleted sooner if you remove them manually from the Activity page. Full detail is in our Privacy Policy.

4. Security measures

5. Security incident response

If we confirm a security incident affecting your data, we will: contain and assess the incident, remediate the underlying cause, and notify you without undue delay — within 72 hours of confirming the incident where required by applicable law — along with what happened and what data was affected, so you can meet your own notification obligations if needed.

6. Data loss prevention

Your data is stored in a managed PostgreSQL database (Supabase) that performs automated backups as part of its standard service. The application itself is version-controlled and deployed from source control, so the running service can be rebuilt and redeployed independently of any single server instance.

7. Your responsibilities

You're responsible for the accuracy and legality of the data you upload — including having the right to import any customer personal data contained in your file into Shopify. Don't upload data you're not authorized to process.

8. Liability

The app is provided as-is, without warranties beyond what's required by applicable consumer protection law. We're not liable for indirect or consequential losses arising from use of the app, to the maximum extent permitted by law.

9. Termination

Uninstalling the app ends this agreement. Per Shopify's standard app lifecycle, your shop's data is fully and permanently deleted from our systems shortly after uninstall (see the Data retention and deletion section of our Privacy Policy).

10. Changes to these terms

If these terms change, the updated version will be posted at this same URL with a revised "Last updated" date.

11. Contact

Questions about this agreement can be sent to support@orderlinkup.app (replace with your real support address before publishing).