Legal
Merchant Data Processing Agreement
Version 2026-10-draft-2 · DRAFT for legal review — not external counsel approval
1. Roles
Merchant (Customer): the business workspace that connects Shopify and controls inbox contacts and conversations. Platform (Processor): the Messages Platform operator providing the SaaS service.
2. Scope of processing
When Shopify is connected, the Platform may process Shopify customer email and phone solely to match a trusted inbox contact to that customer's Shopify orders for customer service and to enforce tenant isolation and customer ownership before returning order data. Access is read-only. The Platform does not maintain a separate Shopify customer warehouse, does not use Shopify customer data for advertising or sale, and does not write to Shopify.
3. Merchant responsibilities
The Merchant must have a lawful basis to share customer email/phone with the Platform for customer service and must honor applicable privacy requests for their end customers.
4. Retention and deletion
Product development defaults (days, configurable per workspace within platform maxima): contacts 730; conversations 365; attachments 365; AI generations/drafts/usage 365; audit logs 730; Shopify OAuth transactions 7; Shopify derived records 30. These are product defaults, not legal advice. Shopify privacy webhooks (customers/data_request, customers/redact, shop/redact, app/uninstalled) are supported operationally.
5. Security
Technical controls are described in the Platform privacy notice and security documentation. Subprocessor list and international transfer mechanisms require legal completion before production publication.
6. Acceptance
Workspace owners/admins with integrations.manage accept this version through POST /api/v1/legal/merchant-dpa/accept. Each acceptance stores tenant id, version, acceptedByUserId, and acceptedAt and is append-only.