1. Who we are
Adoric Technologies LTD ("Adoric", "we", "us") develops and operates conversion apps for online stores, including our Shopify apps for bundles, upsell, cart and popups, as well as Adoric Classic for other website platforms. Our registered contact address for privacy matters is set out in section 15.
This policy applies to our websites, our apps, and the services we provide to merchants. It does not apply to the websites or stores of our merchants, which are governed by their own privacy policies.
2. Controller and processor roles
We act in two different capacities, and your rights depend on which applies:
As a controller
For data about merchants, prospects and website visitors: account details, billing information, support conversations and marketing preferences.
As a processor
For data about a merchant's own customers, which we process on the merchant's instructions under our Data Processing Addendum. The merchant is the controller of that data.
3. Data we collect
We collect only what we need to run the service:
- Account data. Name, business name, email address, phone number, store domain, role and login identifiers.
- Store and catalog data. Product, collection, price, inventory, discount, order and checkout data retrieved from your store platform so our apps can build and price offers.
- Shopper interaction data. Impressions, clicks, offers shown, add-to-cart events, session identifiers, device type, browser, approximate location derived from IP, and referring pages. This is collected on the merchant's behalf.
- Billing data. Plan, subscription status and invoices. Card details are handled by the app store or payment processor, not by us.
- Support and communications data. Messages, attachments, call notes and demo requests you send us.
- Website and log data. IP address, pages viewed, timestamps, error reports and security events.
We do not knowingly collect special categories of personal data, and we do not ask shoppers to provide them.
4. How we use data
- To provide, configure and display the offers our apps are installed to run.
- To report performance to the merchant, including revenue, conversion and attribution metrics.
- To bill for the service, prevent abuse and enforce our terms.
- To provide support, respond to requests and send service notices.
- To maintain security, debug faults and improve reliability and performance of our apps.
- To send marketing communications to business contacts, where permitted, with an opt-out in every message.
We do not sell personal data, and we do not share it for cross-context behavioural advertising.
5. Legal bases
Where the GDPR or UK GDPR applies, we rely on: performance of a contract, to deliver the service you signed up for; legitimate interests, to secure, improve and promote the service in a proportionate way; consent, for non-essential cookies and similar technologies, and for marketing where consent is required; and legal obligation, for tax, accounting and lawful requests. Where we act as a processor, the merchant is responsible for establishing the legal basis and for collecting any consent required from shoppers.
8. International transfers
We and our providers may process data in countries other than your own. Where data leaves the European Economic Area, the United Kingdom or Switzerland, we rely on an adequacy decision where one exists, or on the European Commission's Standard Contractual Clauses together with a transfer risk assessment and additional safeguards where needed. You can request a copy of the mechanism that applies to your data.
9. Retention
We keep personal data only as long as we need it for the purposes described above. Account and configuration data is kept for the life of the account and deleted or anonymised within 90 days of uninstall or account closure, unless a longer period is required by law. Shopper interaction data is retained in identifiable form for up to 12 months and afterwards kept only in aggregated form. Billing records are retained for the period required by tax and accounting rules. Support conversations are retained for up to 24 months.
10. Security
We apply technical and organisational measures appropriate to the risk, including encryption in transit, encryption at rest for stored data, least-privilege access controls, multi-factor authentication for internal systems, logging and monitoring, secure development practices and regular backups. No system can be guaranteed completely secure. If a breach affects your personal data, we will notify you and the relevant authority as required by law and without undue delay.
11. Your rights
Depending on where you live, you may have the right to access your personal data, to correct it, to delete it, to restrict or object to its processing, to receive it in a portable format, to withdraw consent at any time, and not to be subject to unlawful automated decision-making. Residents of California and other US states with comparable laws may also request disclosure of the categories of data collected and shared, request deletion or correction, and appeal a refused request; we do not discriminate against anyone for exercising these rights.
To exercise a right, contact us using the details in section 15. We will respond within the period the applicable law allows, normally within 30 days. If we hold your data as a processor for a merchant, we will refer your request to that merchant and support them in answering it. You may also lodge a complaint with your local supervisory authority.
12. Information for shoppers
If you visited a store that uses our apps, the store is the controller of your data. We display and measure offers on the store's behalf and do not use that data to build profiles for our own purposes or for other merchants. Please contact the store first with any request; if you contact us directly, we will pass the request to the store and assist with it.
13. Children
Our service is intended for businesses and is not directed at children. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
14. Changes to this policy
We may update this policy to reflect changes to our service, our providers or the law. We will post the new version here with a revised date, and for material changes we will notify account holders by email or in the app before the change takes effect.
15. Contact us
For privacy questions, data requests or a copy of our Data Processing Addendum: