Your data in Subset

Who operates this service

Contact the service operator using the support address provided with your Subset account.

What we process and why

Subset processes merchant account and company details, authorized Shopify order, product, inventory and fulfillment information, and customer names, contact details and shipping addresses where access is approved. We use this information to provide order operations, supplier workflows, reporting and customer support features selected by the merchant.

We also process connection credentials, access records and operational logs to authenticate users, protect accounts, troubleshoot problems and operate the service. Shopify handles Shopify app subscription payment processing; Subset stores subscription identifiers and status.

Sharing and connected services

Authorized company users can access information according to their permissions. Where a merchant enables delivery, messaging, email or other integrations, information needed for that feature may be sent to that provider. Those services process information under their applicable terms. Ask the operator for the current hosting locations, service-provider list and applicable international transfer arrangements before enabling a connection.

Access, deletion and retention

Customers can request access to or deletion of their information through the merchant. Shopify forwards supported requests to Subset. Merchants can retrieve prepared data exports and track requests in Subscription & privacy. Exports expire after 30 days. Requests require completion within Shopify’s applicable deadline, subject to valid legal retention requirements.

Uninstalling disconnects the store and stops Shopify token use. Shopify subsequently sends a shop deletion request. Subset removes linked local records and requires the operator to verify legacy records, generated files, backups and connected-service copies before marking deletion complete. Retention for backups and any legally required records must be documented by the operator; contact support for the schedule applicable to your deployment.

Security and your choices

Subset uses encrypted stored Shopify credentials and customer contact fields, access permissions and authenticated webhook processing. Merchants control who joins their company and which integrations they enable. You can remove Shopify access by uninstalling Subset and cancel your subscription through the subscription page. Contact the operator for privacy questions, corrections or complaints.