Pricekeep privacy policy

Effective 15 November 2026

Pricekeep ("the App") is a Shopify app operated by SUPER LARGE ARTIFICIAL BUFFER CORPORATION L.P., Makedonomachon 31, 14569 Dionysos, Greece ("we", "us"). This policy explains what personal data the App processes when a merchant installs it on their Shopify store, why, and for how long.

1. Our role

For data about a store's customers, the merchant is the data controller and we act as a data processor on the merchant's behalf, under our Data Processing Agreement. For data about the merchant and their staff needed to run our service, we are the controller.

2. What the App does

A shopper can ask the store to remind them about products on a day they choose. On that day the App creates a draft order in the merchant's Shopify store and Shopify emails the shopper a checkout link. If the merchant allows it, the reminder keeps the price the shopper saw when they asked (a "price lock").

3. Personal data we process

About shoppers who request a reminder (on the merchant's behalf)

• The email address the shopper enters.
• The reminder: chosen date, time zone, country, language, the products and quantities, the prices shown at the time, and whether a price was locked.
• What happened next: when the email was sent, the draft order ID and checkout link, and, if the shopper bought, the draft order number and total.

The reminder email itself is sent by Shopify from the merchant's store (Shopify's draft order invoice email). We do not send emails ourselves, add shoppers to mailing lists, or store names, postal addresses, phone numbers or payment details. A shopper gets one email per reminder they request.

About the merchant (as controller)

• The store's Shopify domain and the App settings the merchant chooses.
• The access token Shopify issues so the App can work with the store.
• If Shopify provides them for a signed-in staff member: their Shopify user ID, name, email address and locale, used only to authenticate the session.

On the storefront

The "Remind me later" button sets no cookies and loads no tracking. It sends data to the App only when the shopper submits the form.

4. Why we process it

• To provide the App: send the reminder the shopper asked for.
• To show the merchant their dashboard, settings, and reminder history.
• To provide support, keep the App secure, and fix problems.
• To meet legal obligations.

We use personal data only for these purposes. We never sell it, use it for advertising, or build profiles of customers. The App makes no automated decisions with legal or similarly significant effects.

5. Legal basis (GDPR)

For customer data we process on the merchant's documented instructions (Article 28 GDPR). For merchant data our basis is the performance of our contract with the merchant and our legitimate interest in running and securing the service.

6. How long we keep it

• Reminders, including the shopper's email address: deleted automatically 90 days after the reminder is finished (bought, expired or cancelled).
• Unpaid draft orders the App created are deleted from the store when their checkout link expires.
• When a customer asks the merchant to erase their data, Shopify notifies us and we delete that email address's reminders.
• When a merchant uninstalls the App, Shopify notifies us within 48 hours and we delete all of that store's data.

7. Who we share it with

We share data only with these sub-processors, and only as needed to run the App:

• Shopify Inc. and affiliates: the platform the App runs on.
• Render Services, Inc.: application hosting (EU, Frankfurt, Germany).
• Render Services, Inc. (managed PostgreSQL): database hosting (EU, Frankfurt, Germany).

We may disclose data if required by law. Where data is transferred outside the EEA or UK, we rely on the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.

8. Security

Data is encrypted in transit (HTTPS) and at rest. Requests from Shopify are verified with signatures, the App only requests the Shopify permissions it needs, and access to production systems is restricted to people who need it.

9. Your rights

Customers of a store should contact that store: the merchant controls your data and we will help them respond to access, correction and erasure requests. Merchants can contact us at admin@slabuf.com to access, correct or delete their data. You may also complain to your local data protection authority; our lead authority is the Hellenic Data Protection Authority (www.dpa.gr).

10. Changes

We will update this page if the App's data use changes and change the effective date above. Material changes will be announced to merchants in the App.

11. Contact

SUPER LARGE ARTIFICIAL BUFFER CORPORATION L.P., Makedonomachon 31, 14569 Dionysos, Greece. G.E.MI. no. 172893101000, VAT no. EL802245467. Email: admin@slabuf.com.