lalo-app
PacelineData Processing Addendum
Paceline by lalo-app · Last updated: October 15, 2026
This Addendum forms part of the terms of use and applies when Paceline processes personal data on your behalf under the EU/UK General Data Protection Regulation (GDPR) or similar laws. It is accepted by installing and using the app; no signature is required.
1. Roles
You, the merchant, are the controller of your store data. lalo-app (“we”) is the processor and processes it only to provide Paceline, following your documented instructions — the settings you choose in the app and these terms.
2. Subject matter and duration
We read your products, stock and (if you use them) recent order lines through the Shopify Admin API to rank the products of your collections, and write the new order, the collections you approve and shoppers' own preferences back to your store. This lasts for as long as Paceline is installed on your store; data is deleted as described in section 8.
3. Categories of data and data subjects
- Product data — titles, vendors, types, tags, options, prices, publication dates, collections and stock. Normally not personal data.
- Order lines — products and quantities of recent orders, counted per product in memory, without customer details.
- Shopper preferences (only with the personal order on) — what a signed-in shopper chose, stored in that customer's record in your store; read by customer ID only.
- Store data — store domain, an access token issued by Shopify (encrypted), your plan, and service records (install and removal dates, plan changes, first steps in the app).
- Contact data — only if you write to support: your name, email address and the content of your message.
Data subjects are your signed-in shoppers (only with the personal order on, and only their customer ID and own choices) and the merchant and staff who contact support. Paceline reads no names, emails, phone numbers or addresses.
4. Confidentiality
Only people who operate Paceline can access the data, and they are bound by confidentiality.
5. Security measures
- Encryption in transit (HTTPS/TLS) for the app and the Shopify API.
- Least privilege: Paceline writes only the order of products in collections, the collections you approve and its own customer metafield; customer access only if you turn the personal order on.
- Store isolation: every request is authenticated through Shopify and data is separated by store.
- Webhook signatures from Shopify are verified before any request is processed; repeated deliveries of the same event are ignored.
- Access tokens are encrypted in the database (AES-256-GCM) and not written to logs; access logs leave out addresses' parameters and referrers, are rotated and size-limited.
- Server access is limited to the operator, by key-based login only, behind a firewall; the application runs as an unprivileged user in an isolated container with memory and CPU limits.
- Databases are copied every night to the same server and the copies are kept for 7 days.
- A shopper's personal order is held in memory for at most 10 minutes and never written to disk.
6. Subprocessors
You authorize the subprocessors listed on the Subprocessors page. We will announce new subprocessors there at least 14 days before they start processing; you may object by writing to us, and if we cannot address the objection you may stop using the app. We bind each subprocessor to data protection obligations at least as protective as this Addendum.
7. Assistance and breaches
- We help you answer data subject requests and comply with security, impact-assessment and consultation obligations, taking into account the nature of the processing.
- We notify you without undue delay, and where feasible within 72 hours, after becoming aware of a personal data breach affecting your data, with the information available to us.
8. Deletion
When you uninstall Paceline, the access token is deleted immediately; your settings, rules, snapshots and suggestions is erased when Shopify sends the shop redaction request (48 hours after uninstall), service records stay only without your store domain, and nightly database copies roll over within 7 days. The order of your collections and approved collections stay in your store. Anonymous shared statistics (category-level decisions without any store identifier, see the Privacy Policy) are not personal data and are kept.
9. Transfers
Data is hosted in the European Union (France). If a subprocessor processes data outside the EEA, we rely on an adequacy decision or the EU Standard Contractual Clauses.
10. Audits
On request we provide the information necessary to demonstrate compliance with this Addendum, such as a description of our security measures and subprocessors.