Purpose and contractual status
This statement describes practices for merchant due diligence and supplements the privacy policy and terms. It is not a separately executed DPA, standard contractual clause or certification. If you require a signed data agreement, transfer clauses or procurement terms, contact support@codekaarigari.com before processing data that requires that arrangement.
Scope and instructions
Merchants control their business data and instruct NetGuard through installation, configuration and authorized actions. Processing includes retrieval, synchronization, storage, calculation, document generation, communication, access control and deletion for B2B credit/invoice workflows. It continues while the service is used and during applicable retention/deletion processing.
Data subjects include merchant personnel, company contacts and B2B buyers. Categories include business/contact identifiers, orders, invoices, payments, terms, credit settings and necessary operational information. The service is not intended for special-category data or full payment-card credentials.
Service providers
Shopify provides commerce, identity and billing. Cloudflare provides hosting, database, session/cache, files and PDF rendering. Resend delivers transactional email. Our email service processes support correspondence. Refer to the privacy policy for disclosure purposes and international processing.
Safeguards
Implemented controls include signed Shopify authentication, store/buyer authorization checks, webhook verification, encrypted persisted Shopify tokens, input validation and controlled PDF access. Operational records assist troubleshooting and reconciliation. These descriptions do not claim ISO 27001, SOC 2, penetration-test certification or a contractual uptime guarantee.
Requests and incidents
We support Shopify customer-data requests, customer redaction and shop redaction and assist with appropriately verified privacy requests. For suspected data incidents, email the contact address with the subject NetGuard data incident, a concise description and timing. Do not send exposed credentials or unnecessary records. Notification duties follow applicable law and any executed agreement.
Return, deletion and enterprise arrangements
Export supported records and download needed PDFs before uninstalling. Shop redaction removes covered app data and stored invoices, subject to reinstall safeguards and provider lifecycles. Contact us for specific return/deletion requirements, retention questions or an enterprise questionnaire. Do not assume geographic hosting restrictions or signed transfer safeguards without confirmation.