Legal
Data processing addendum
Last updated 17 October 2026
This addendum applies to every merchant who installs profit.broker. It forms part of the agreement between the merchant and Sour Mango Limited and takes effect when the app is installed. It explains how we handle personal data from your store on your behalf.
1. Parties and roles
"You" means the merchant who installs profit.broker. "We" means Sour Mango Limited, registered in Hong Kong, with its registered office at Unit 2904-05, 29/F, Universal Trade Centre, 3 Arbuthnot Road, Central, Hong Kong SAR. For personal data from your store, you are the controller and we are the processor.
2. What we process
| Purpose | Calculating profit, forecasts, payout forecasts and break-even figures, and sending the reports and alerts you set up. |
|---|---|
| People concerned | Your store's customers; your staff who use the app; the report recipients you add. |
| Personal data | Shopify customer IDs and the financial details of those customers' orders, refunds and payments; staff Shopify user IDs in the audit log; report recipients' email addresses. |
| Not processed | Customer names, email addresses, phone numbers, postal addresses, postcodes, IP addresses, locations and order notes. No special category data. |
| Duration | While the app is installed, then until deletion under section 8. |
3. Our commitments
- We process personal data only on your documented instructions. Installing and configuring the app are your instructions. If we believe an instruction breaks data protection law, we'll tell you.
- We don't sell personal data or use it for any purpose of our own, including advertising or profiling.
- Everyone who can access your data is bound by confidentiality.
- We apply the security measures in section 5 and keep them up to date.
4. Sub-processors
You authorise the sub-processors listed in our privacy policy. We'll give you at least 30 days' notice by email before adding or replacing one, and you may object or uninstall the app before the change takes effect. Each sub-processor is bound by data protection terms at least as protective as these.
5. Security measures
- Encryption in transit for all connections, and encryption at rest for stored data and backups.
- Access tokens encrypted with keys held in a managed key service.
- Database-level separation between stores, tested automatically.
- Read-only access to Shopify and connected ad accounts.
- Production access limited to authorised staff with two-step login, and an audit log of support access.
- Only the data the service needs is collected; Shopify's change notifications are not stored.
- Test and development systems never use real store data.
6. Helping you with requests and obligations
We help you answer requests from people exercising their data protection rights. Requests passed on through Shopify are handled automatically or within 30 days. We also give you reasonable help with security, impact assessments and consultations with authorities, taking into account the limited data we process.
7. Personal data breaches
If we become aware of a breach affecting your personal data, we'll notify you without undue delay. We'll tell you what happened, what data is affected, what we're doing about it and who you can contact, and we'll keep you updated as we learn more.
8. Deletion
When you uninstall the app, Shopify sends us a deletion request 48 hours later. We then delete all of your store's data from our systems. Deleted data leaves our backups within 5 weeks. You can export your data before uninstalling.
9. Transfers
Your data is stored in Frankfurt, Germany. Where a sub-processor handles personal data outside the European Economic Area or the UK, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.
10. Information and audits
On request, we'll give you the information you reasonably need to show that these terms are being met, including answers to security questionnaires. Any audit beyond that is by agreement, at reasonable notice and at your cost.
11. Changes and precedence
If we change this addendum, we'll update the date at the top and tell you by email before the change takes effect. If this addendum conflicts with other terms between us about personal data, this addendum wins.
12. Contact
Sour Mango Limited, Unit 2904-05, 29/F, Universal Trade Centre, 3 Arbuthnot Road, Central, Hong Kong SAR · hello@profit.broker