Terms of service and data protection agreement

Last updated 11 October 2026

These terms are an agreement between you (the merchant) and Northview Labs Inc., a Delaware corporation with its principal place of business at 50 Northview Ct, Danville, CA 94506, USA (“Northview”, “we”), the company that operates Gisto. By installing Gisto on a Shopify store you agree to them. They include the data protection commitments below, which form our data processing agreement with you.

The service

Gisto reads your store's order and product data through Shopify's API and provides analytics: comparisons across periods, detected changes, a daily email, and answers to your questions. Results are informational and computed from your data; you remain responsible for business decisions.

Plans and fees

Gisto has a free plan and a paid Pro plan. Every new install starts with a 14-day trial of Pro at no charge and with nothing to cancel; when it ends the store continues on the free plan unless you choose Pro. Pro is billed by Shopify through your Shopify account at the prices shown on the app's plan page, monthly or yearly. You can change or cancel your plan from that page at any time; changes take effect as Shopify describes there, and uninstalling the app ends the subscription. We do not collect payment details ourselves.

Data protection commitments

• Roles. You are the controller of your store's data; we are a processor acting on your instructions, which are to provide the analytics described above.
• Minimum data. We process only the fields listed in the privacy policy and no direct customer identifiers.
• Purpose limitation. We use the data solely to provide the service to you. We do not sell it, share it with third parties for their own purposes, or use it for advertising.
• Sub-processors. Vercel (hosting), Neon (database), Resend (email delivery), Anthropic (AI model), TypeSafe (chart selection), and Cloudflare (DNS and support-mailbox forwarding), each bound by their own data processing terms. We will inform you before adding others.
• Security. Encryption in transit and at rest (including backups), application-level encryption of API tokens, separation of test and production data, and restricted staff access.
• Retention and deletion. Data is deleted when you uninstall the app, on Shopify's shop/redact request, and no later than 30 days after uninstall. Customer redaction requests forwarded by Shopify are honoured.
• Assistance. We will help you respond to customer data requests relating to data we hold and will notify you without undue delay of any personal data breach affecting your data.
• Audit. On request, we will provide information reasonably necessary to demonstrate these commitments.

Availability and changes

The service is provided as is, without warranty. We may change or discontinue features with notice through the app or by email. You may stop using the service at any time by uninstalling it.

Liability

To the extent permitted by law, our liability for any claim relating to the service is limited to the fees you paid for it in the preceding twelve months, or nothing if the service was free.

Governing law

These terms are governed by the laws of the State of Delaware, without regard to its conflict-of-law rules. Any dispute that cannot be resolved between us will be brought in the state or federal courts located in Delaware, and both of us consent to their jurisdiction.

Contact

Northview Labs Inc., 50 Northview Ct, Danville, CA 94506, USA. hello@gisto.app.

Privacy policy · Home