Data Processing Terms

1. Roles and instructions

For merchant data processed by a HappifyApps Shopify app, the merchant is generally the controller or data fiduciary and Udaan Technologies Pvt. Ltd., operating HappifyApps, acts as processor or data processor. We process that data only to provide, secure, support, and improve the contracted app, on the merchant’s documented instructions and applicable Shopify requirements.

2. Processing details

• Subject matter: operation of the installed app and requested support.
• Duration: the installation or service term plus the documented deletion period.
• People: merchants, staff, customers, and recipients whose data is made available through permitted Shopify scopes.
• Data: the store, product, inventory, order, customer, and operational fields described in the Privacy Policy for the applicable app.

3. Commitments

• Confidentiality, data minimisation, access control, encryption, and incident-response measures described on the Security page.
• Reasonable assistance with access, correction, deletion, restriction, portability, objection, and complaint requests.
• Deletion or return after termination, subject to legal retention duties and documented backup cycles.
• Use of sub-processors under data-protection obligations appropriate to their services.

4. Transfers and audits

Where data crosses borders, we use the provider and contractual mechanisms available for the relevant service and jurisdiction. On reasonable request, we will provide information needed to evaluate our controls, subject to confidentiality, security, and third-party restrictions.

5. Signed DPA

This public summary does not replace a mutually signed agreement where one is required. Merchants can request the current DPA and transfer terms at privacy@happifyapps.com.