Data processing agreement

Who is who

• You, the merchant, are the controller: you decide what to photograph, what to write and what to publish.
• L.M Media is the processor: we process the data only to provide CamToCart, on your documented instructions. Your instructions are these terms, your settings, and what you ask for in the app (for example tapping Publish). If we think an instruction breaks the law, we tell you.

What data, about whom

• The service handles product data: product photos, the notes you type, the listing text, prices, your store's identity and settings, and the access token Shopify gives the app.
• Personal data appears only when you put it there, for example a person's face in a photo or a name in a note. We do not ask for it and do not look for it.
• We hold no data about your customers: the app cannot read orders, customers or payments. Staff session tokens are checked and not stored.

Our duties

• Process the data only to provide the service, never for our own purposes, never to sell or share it, and never to train AI models.
• Keep it confidential: only the people who run the service can reach it, and they are bound to confidentiality.
• Keep it secure (see Security below).
• Help you answer requests from people about their data, and help with the security, impact-assessment and consultation duties the law gives you, as far as our part of the processing allows.
• Delete the data when the service ends (see Deletion below).
• Give you the information needed to show we meet this DPA.

Subprocessors

You allow us to use these subprocessors. We use each of them under its terms for business customers, including its data processing terms:

• netcup GmbH: hosting of our servers, database and photo storage. Germany (EU).
• Anthropic PBC: writes the listing from your photos and note, and translates it when you ask or turn on Store languages. United States.
• Features & Labels, Inc. (fal): scene photo backgrounds (it receives only our own description of a background), and cut-out help when our own background removal is busy (it receives the product photo). United States.
• Google LLC (Google Cloud Vision): checks product photos for logos and printed words, for Store Shield. United States. Listed before this check is switched on.
• Shopify Inc. and its affiliates: the platform the app runs in; your products are created in your Shopify store, and Shopify bills the plans.

Changes to subprocessors

We update this list here, and tell you in the app, before a new subprocessor receives any of your data. If you object, write to us; if we cannot meet your objection, you can stop using the app at any time by uninstalling it, and your data is deleted as described below.

International transfers

We are in Israel, which the European Commission recognizes as giving personal data adequate protection. Our servers are in Germany (EU). Anthropic, fal and Google process data in the United States. Those transfers rely, where applicable, on the EU-U.S. Data Privacy Framework where the provider is certified under it, and otherwise on the European Commission's Standard Contractual Clauses (with the UK addendum for UK data), as set out in each provider's data processing terms.

Security

• All traffic is encrypted (TLS).
• The access token is encrypted at rest (AES-256-GCM), with the key kept outside the database.
• Every request between the app's parts is signed and checked, and each store can reach only its own data.
• Our internal log holds only numbers and short codes, never product text, names, e-mail addresses or phone numbers.
• Nightly backups are kept for 14 days, then deleted.

Personal data breach

If we become aware of a breach of security that affects personal data we process for you, we tell you without undue delay, in the app and by writing to your store's contact e-mail address, with what we know, what it means for you, and what we are doing about it. We keep you updated as we learn more.

Deletion

• Photos are deleted once they are 30 days old and the product no longer needs them (the privacy policy has the details).
• When you uninstall the app, the access token is deleted at once. 48 hours later Shopify asks us to erase your store's data (shop/redact), and we delete your store's record, its products' records and photos, its settings and its usage. Backups that still hold them are deleted within 14 days.
• You can ask for deletion earlier, or for a copy of the data first, by writing to support@camtocart.com.
• Products you published are in your Shopify store and stay yours.

WooCommerce stores

• Access: instead of Shopify's access token, we hold the read and write REST API key that WooCommerce creates and sends us when you approve it on your own store's screen.
• Shopify is not a subprocessor for a WooCommerce store. Your products are created in your own store, on your own host, and Shopify does not bill the plans.
• Pictures: for each picture of a product you publish we keep a temporary copy behind a private link that works for 15 minutes. The copy is deleted within 3 hours and is not in our backups.
• Deletion: when you disconnect in CamToCart, our copy of the key is deleted at once. Drafts and photos for that store are deleted after 48 hours, unless the store connects again before that. Products you published stay in your store and remain yours.

Everything above applies to a WooCommerce store too, with these differences.

Wix sites

• Access: instead of Shopify's access token, Wix gives our server a short-lived token for your site from CamToCart's own app credentials when a call is needed; we keep it only in memory.
• Wix.com Ltd. and its affiliates take Shopify's place among the subprocessors for a Wix site: your products and their pictures are created in your Wix site, and Wix bills the plans. Shopify is not a subprocessor for a Wix site.
• Pictures: for each picture of a product you publish we keep a temporary copy behind a private link that works for 15 minutes, so Wix can bring it into your Media Manager. The copy is deleted within 3 hours and is not in our backups.
• Deletion: when you remove the app from your site, we stop at once. Your site's records, its products' records and its photos are deleted after 48 hours, unless the app is added again before that. Products you published stay in your Wix store and remain yours.

Everything above applies to a Wix site too, with these differences.

Audits

We answer your written questions about our processing within 30 days. Where the law gives you the right to audit, you or an independent auditor bound to confidentiality may audit our compliance with this DPA, after 30 days' written notice, at your cost, and no more than once a year unless a regulator requires it or a breach has happened. We hold no third-party security certification today.

Order and law

If this DPA and the terms of service differ about personal data, this DPA applies. Otherwise the terms of service apply, including the governing law of the State of Israel and the courts in Tel Aviv, unless the data protection law that applies requires otherwise.

Terms of service · Privacy policy

Contact

L.M Media, Israel. support@camtocart.com