Terms of service and data protection agreement
Last updated 16 September 2026
By installing Gisto on a Shopify store you (the merchant) agree to these terms. They include the data protection commitments below, which form our data processing agreement with you.
The service
Gisto reads your store's order and product data through Shopify's API and provides analytics: comparisons across periods, detected changes, a daily email, and answers to your questions. Results are informational and computed from your data; you remain responsible for business decisions.
Data protection commitments
- Roles. You are the controller of your store's data; we are a processor acting on your instructions, which are to provide the analytics described above.
- Minimum data. We process only the fields listed in the privacy policy and no direct customer identifiers.
- Purpose limitation. We use the data solely to provide the service to you. We do not sell it, share it with third parties for their own purposes, or use it for advertising.
- Sub-processors. Vercel, Neon, Resend, and the AI model provider via Vercel AI Gateway, each bound by their own data processing terms. We will inform you before adding others.
- Security. Encryption in transit and at rest (including backups), application-level encryption of API tokens, separation of test and production data, and restricted staff access.
- Retention and deletion. Data is deleted when you uninstall the app, on Shopify's shop/redact request, and no later than 30 days after uninstall. Customer redaction requests forwarded by Shopify are honoured.
- Assistance. We will help you respond to customer data requests relating to data we hold and will notify you without undue delay of any personal data breach affecting your data.
- Audit. On request, we will provide information reasonably necessary to demonstrate these commitments.
Availability and changes
The service is provided as is, without warranty. We may change or discontinue features with notice through the app or by email. You may stop using the service at any time by uninstalling it.
Liability
To the extent permitted by law, our liability for any claim relating to the service is limited to the fees you paid for it in the preceding twelve months, or nothing if the service was free.