lalo-app
feedBridgeData Processing Addendum
feedBridge by lalo-app · Last updated: September 25, 2026
1. Roles
You, the merchant, are the controller of your store data. lalo-app ("we") is the processor and processes it only to provide feedBridge, following your documented instructions — the settings you choose in the app and these terms.
2. Subject matter and duration
We read your product catalog through the Shopify Admin API (read-only) to build product feeds for as long as feedBridge is installed on your store, and delete the data as described in section 8.
3. Categories of data and data subjects
- Product data — titles, descriptions, prices, stock, identifiers, images and links. This is normally not personal data.
- Store data — store domain, name, currency, time zone, subscription status and an access token issued by Shopify.
- Contact data — only if you write to support: your name, email address and the content of your message.
feedBridge does not access customers, orders, checkouts or payment data. Data subjects are limited to the merchant and their staff who contact support.
4. Confidentiality
Only people who operate feedBridge can access the data, and they are bound by confidentiality.
5. Security measures
- Encryption in transit (HTTPS/TLS) for the app, the Shopify API and feed links.
- Least privilege: the app requests only the
read_productsscope and cannot change your store. - Store isolation: every request is authenticated through Shopify and data is separated by store.
- Feed links contain a random 128-bit token; feeds of stores whose plan no longer covers them are not served.
- Administrative access to the server is limited to the operator; the application runs as an unprivileged user in an isolated container.
- Session tokens are not written to logs; logs are rotated and size-limited.
- Daily database backups on the same server, kept for 7 days.
- Webhook signatures from Shopify are verified before any request is processed.
6. Subprocessors
You authorize the subprocessors listed on the Subprocessors page. We will announce new subprocessors on that page at least 14 days before they start processing; you may object by writing to us, and if we cannot address the objection you may stop using the app. We bind each subprocessor to data protection obligations at least as protective as this Addendum.
7. Assistance and breaches
- We help you answer data subject requests and comply with security, impact-assessment and consultation obligations, taking into account the nature of the processing.
- We notify you without undue delay, and where feasible within 72 hours, after becoming aware of a personal data breach affecting your data, with the information available to us.
8. Deletion
When you uninstall feedBridge, your feeds, feed files, reports and settings are deleted immediately; remaining store data is erased when Shopify sends the shop redaction request (48 hours after uninstall). Backups are overwritten within 7 days. A one-way hash of the store domain is kept to apply the one-trial-per-store rule; it is not personal data.
9. Transfers
Data is hosted in the European Union (France). If a subprocessor processes data outside the EEA, we rely on an adequacy decision or the EU Standard Contractual Clauses.
10. Audits
On request we provide the information necessary to demonstrate compliance with this Addendum, such as a description of our security measures and subprocessors.