lalo-app
WYSData Processing Addendum
WYS by lalo-app · Last updated: October 15, 2026
This Addendum forms part of the Terms of Service and applies when WYS processes personal data on your behalf under the EU/UK General Data Protection Regulation (GDPR) or similar laws. It is accepted by installing and using the app; no signature is required.
1. Roles
You, the merchant, are the controller of your store data. lalo-app (“we”) is the processor and processes it only to provide WYS, following your documented instructions — the settings you choose in the app and these terms.
2. Subject matter and duration
We read your products and stock through the Shopify Admin API to assign size charts and check them, and write the charts and assignments into app-owned records in your store. This lasts for as long as WYS is installed on your store; data is deleted as described in section 8.
3. Categories of data and data subjects
- Product data — titles, vendors, types, tags, collections, options, variants and stock. Normally not personal data.
- Watchdog report — for products that need attention: title, handle, image link, vendor, type and the sizes missing from a chart.
- Store data — store domain, an access token issued by Shopify (encrypted), your plan, and service records (install and removal dates, plan changes, first steps in the app).
- Contact data — only if you write to support: your name, email address and the content of your message.
WYS does not process personal data about your customers or storefront visitors. The storefront size chart is rendered by your theme; with the visitor's consent, it sends anonymous counts of chart use (opened, size found, size chosen, added to cart) through Shopify's app proxy, which we keep only as daily totals per chart. The visitor's IP address, if present in that request, is used only in memory to limit abuse and is not stored. Data subjects are the merchant and staff who contact support.
4. Confidentiality
Only people who operate WYS can access the data, and they are bound by confidentiality.
5. Security measures
- Encryption in transit (HTTPS/TLS) for the app and the Shopify API.
- Least privilege: read access to products and inventory; write access only to the app's own metaobjects and metafields. WYS never changes your products.
- Store isolation: every request is authenticated through Shopify and data is separated by store.
- Webhook signatures from Shopify are verified before any request is processed; repeated deliveries of the same event are ignored.
- Access tokens are encrypted in the database (AES-256-GCM) and not written to logs; access logs leave out addresses' parameters and referrers, are rotated and size-limited.
- Server access is limited to the operator, by key-based login only, behind a firewall; the application runs as an unprivileged user in an isolated container with memory and CPU limits.
- Databases are copied every night to the same server and the copies are kept for 7 days.
- Your size charts live in your Shopify store; the server keeps sessions, the watchdog report, daily storefront totals and service records only.
6. Subprocessors
You authorize the subprocessors listed on the Subprocessors page. We will announce new subprocessors there at least 14 days before they start processing; you may object by writing to us, and if we cannot address the objection you may stop using the app. We bind each subprocessor to data protection obligations at least as protective as this Addendum.
7. Assistance and breaches
- We help you answer data subject requests and comply with security, impact-assessment and consultation obligations, taking into account the nature of the processing.
- We notify you without undue delay, and where feasible within 72 hours, after becoming aware of a personal data breach affecting your data, with the information available to us.
8. Deletion
When you uninstall WYS, the access token is deleted immediately; the watchdog report, the storefront totals and anything else the app kept about your store is erased when Shopify sends the shop redaction request (48 hours after uninstall), service records stay only without your store domain, and nightly database copies roll over within 7 days. Your size charts stay in your store until you delete them there. Anonymous shared statistics (normalized size words without any store identifier, see the Privacy Policy) are not personal data and are kept.
9. Transfers
Data is hosted in the European Union (France). If a subprocessor processes data outside the EEA, we rely on an adequacy decision or the EU Standard Contractual Clauses.
10. Audits
On request we provide the information necessary to demonstrate compliance with this Addendum, such as a description of our security measures and subprocessors.