AmendLane data processing terms

These terms apply when a Shopify merchant installs and uses AmendLane. The merchant is the controller of Shopify customer data and AmendLane is its processor for the supported order-correction workflow.

Instructions and purpose

AmendLane processes order, customer, product, inventory, fulfillment, and hold identifiers; order status; and financial amounts only to authenticate shoppers, evaluate eligibility, apply confirmed corrections, maintain an audit trail, and recover or release accepted work. It does not sell data or use it for advertising.

Confidentiality and security

Access is limited to the application workflow, authenticated with Shopify tokens, logged without raw customer payloads, encrypted in transit and at rest, and separated per merchant. AmendLane will notify affected merchants without undue delay after confirming a personal-data incident.

Subprocessor

Cloudflare provides the Worker runtime, encrypted network transport, and SQLite-backed Durable Object storage. AmendLane remains responsible for its subprocessors and requires data-protection obligations appropriate to the service.

Deletion and assistance

AmendLane handles Shopify's customer and shop redaction webhooks, applies the retention periods in the privacy policy, and assists the merchant with access, deletion, security, and audit questions at privacy@keelcroft.com.