Wistlora Merchant Privacy and Data Protection Agreement
Version 2026-10-22 · Published 22 October 2026
Parties and acceptance
This agreement is offered by Starment House, operating Appsorcerer (the Provider), to the business operating the Shopify store identified in the acceptance record (the Merchant). Contact the Provider for privacy, security incidents and contractual notices at help@appsorcerer.com.
The Merchant accepts this version through an authorized representative in the authenticated Wistlora admin. The acceptance record identifies the store, agreement version and document digest, acceptance time, and a pseudonymous reference to the authenticated Shopify staff account. The representative confirms authority to bind the Merchant. Acceptance is not inferred from an app installation or a visit to this page. The agreement takes effect for that Merchant when acceptance is recorded, and governs processing while the service is used and until the relevant data is returned or deleted. It supplements, and does not replace, the parties’ separate obligations to Shopify.
Roles, purpose and instructions
The Merchant determines why its shoppers’ personal data is processed and acts as controller where applicable. The Provider acts as processor for wishlist data. Wistlora saves chosen product variants, supports explicit guest-to-account merging, optional read-only sharing and cart actions, and supplies merchant activity counts and privacy exports. The Merchant’s settings, shopper actions and documented support requests provide instructions within this scope. The Provider will not use this data for unrelated purposes, advertising, sale, or legally significant automated decisions.
The Provider processes data only on documented Merchant instructions, including transfers, unless applicable law requires otherwise. Where permitted, it will notify the Merchant of such a legal requirement and flag instructions it considers unlawful. The Merchant is responsible for a lawful basis, shopper notices and consent where required, appropriate staff permissions, and lawful instructions. The Provider will support applicable consent, objection and deletion decisions through the service and privacy-request process.
Data and people covered
Data subjects are visitors and customers who use wishlists, and authorized merchant users whose acceptance is recorded. Stored information includes shop identity and settings; keyed digests representing guest lists and authenticated customer identifiers; product handles and variant references; save timestamps; list-level save and reported-cart activity; sharing expiry and privacy exports; and the agreement acceptance record described above. These digests are pseudonymous, not anonymous. Wistlora does not request shopper names, email addresses, phone numbers, postal addresses, orders or payment details. Support correspondence voluntarily sent by a Merchant is handled for that request.
Guest access keys remain in the shopper’s browser. A shopper may create a read-only link; anyone holding it can see that list’s product references until expiry or revocation. The Merchant must protect data downloaded from the app and use it only for lawful purposes.
Security, confidentiality and assistance
The Provider will maintain appropriate safeguards, restrict access to authorized personnel with confidentiality obligations, and review security controls. Current measures include TLS, encrypted database and privacy journal files, authenticated encrypted backups, tenant separation, Shopify session-token authentication and signed storefront proxy requests. No security certification, guaranteed recovery time or zero-data-loss guarantee is represented.
The Provider will notify the Merchant without undue delay after becoming aware of a personal-data breach affecting its data, provide available details and subsequent updates, and assist with rights requests, security obligations, impact assessments and regulatory consultations as applicable to the processing. It will supply information reasonably needed to demonstrate compliance and allow proportionate audits or inspections, subject to confidentiality and protection of other merchants’ data. Contact help@appsorcerer.com for these requests.
Hosting, subprocessors and transfers
Wishlist storage and operational backups are hosted on OVH infrastructure in France. Acceptance specifically authorizes OVH to provide this hosting. The Provider remains responsible for its processing obligations and must maintain appropriate written data-protection terms with subprocessors. Before adding or replacing a subprocessor, the Provider will notify the Merchant and allow a reasonable opportunity to object; if an objection cannot be resolved, the affected processing must stop and the Merchant may end the service.
Shopify supplies the Merchant’s commerce, authentication and storefront services under its own arrangements. This agreement does not amend Shopify’s terms or claim to bind Shopify.
The Provider must assess applicable restrictions before any international transfer, including remote administrative access, and establish any required lawful safeguards and contractual mechanism before proceeding. Hosting in France does not by itself establish a lawful mechanism for every transfer. The Provider will make information on applicable processing locations and safeguards available to the Merchant on request. This agreement is not itself a set of international-transfer standard contractual clauses.
Retention, return and deletion
- Guest lists expire after 90 inactive days; account lists after 365 inactive days.
- Share links expire after 30 days or earlier revocation. Consumed guest-key digests are kept up to 365 days to prevent reuse after a merge.
- Cart deduplication records expire after one day; privacy-request exports after 30 days.
- Encrypted backups rotate daily with a seven-day retention limit; the restore tool rejects older backups. Separate encrypted erasure records are kept up to eight days to protect recovery.
- Agreement acceptance records are retained while the app remains installed and removed with app-held store data on uninstall, subject to the restricted backup schedule.
Shoppers may erase a list. Verified Shopify privacy and uninstall events remove the corresponding app data. At termination, the Merchant chooses return or deletion, except where law requires retention. The Merchant can download its data while installed or request return from support before uninstalling; uninstalling instructs deletion and may make later return unavailable. Any legally required retention must be identified, restricted and ended when no longer required.
Backup data remains restricted from ordinary use until deletion. Recovery reapplies privacy erasures, discards guest lists and old share capabilities, removes pending exports and pauses wishlists for verification. Recently re-saved references may be lost during this protective process. Backups currently remain on the same server and do not provide independently qualified recovery from complete server loss.
Changes and applicable obligations
Material changes require a new version and Merchant acceptance before processing under changed terms. Mandatory privacy rights and applicable law prevail over conflicting provisions. This agreement does not waive statutory rights or promise blanket compliance for every jurisdiction. The Merchant and Provider remain responsible for the legal obligations that apply to them.