Clearpick Pack Check merchant terms and data processing agreement

Service terms

These terms apply between Fritz Döbel (Clearpick Pack Check) and the business operating the Shopify store that accepts them. The person accepting confirms authority to act for that business. Clearpick Pack Check reads authorized Shopify fields to verify remaining physical item quantities for one order and merchant-managed fulfillment location.

The service offers barcode or SKU scanning, manual counting, undo, print and CSV export for up to 50 open orders per batch. Unknown or ambiguous identifiers and excess scans do not add units. Scan progress stays in the current tab and resets on refresh, closing the tab or changing orders. The app does not reserve stock, change orders or fulfill orders. Merchants must refresh and verify Shopify status before shipping. Only bundle relationships recorded by Shopify are included.

The launch plan is Free, with no subscription or usage charges. Installing the app or accepting these terms does not authorize a charge. Any future paid plan requires a separate Shopify approval and clearly disclosed prices. Merchants can stop using the service and uninstall it at any time.

Merchants keep ownership of their data and must use the service lawfully, protect their Shopify accounts, and avoid uploading credentials or customer information in support messages. Clearpick Pack Check may suspend access where necessary to address abuse, a security incident, or a legal requirement, and will explain the reason where permitted. Clearpick Pack Check depends on Shopify and hosting services and does not promise uninterrupted availability or a particular commercial result. Statutory rights and liabilities that cannot legally be excluded remain unaffected.

Material changes to these terms will be shown in the app before a merchant accepts a new version. Changes to subscription charges require Shopify's applicable approval process.

Data processing agreement

This agreement governs personal data processed on the merchant's behalf for the service. The merchant determines its purposes and acts as controller, or as a processor authorized by its controller. Fritz Döbel acts as processor or subprocessor. The instructions are limited to providing and securing Clearpick Pack Check, implementing authorized support requests and deletion requests, and complying with law. Clearpick Pack Check will inform the merchant if an instruction appears unlawful and, unless legally prohibited, before processing required by law outside those instructions.

The subject matter is verification of remaining Shopify order quantities before packing. Processing includes reading, transmitting, organizing and displaying authorized data, exporting checks at the merchant’s request, storing encrypted authentication sessions, and deleting stored shop records. Processing lasts while installed, subject to the retention terms below. The app records the shop domain, agreement version and acceptance time while installed; these records are removed on uninstall or shop redaction.

People concerned can include the merchant’s customers and staff. Data includes order identifiers and references, product and variant information, SKUs and barcodes, fulfillment locations and remaining quantities, native bundle relationships, shop domain, scopes, Shopify session metadata and authentication tokens. Customer names, email addresses, phone numbers, shipping addresses, billing addresses, payment details and special-category data are not requested. Order references may still identify a person in the merchant’s hands.

Clearpick Pack Check will restrict access to people who need it to provide the service and who are bound to confidentiality. It will maintain appropriate technical and organizational measures, including HTTPS, encrypted private storage connections, authenticated Shopify requests, application encryption of stored access and refresh tokens, restricted hosting access, minimized data queries, and exclusion of tokens and order contents from application logs. These measures are described more fully in the privacy notice and operational security documentation.

The merchant authorizes Cloudflare, Inc. to provide Workers hosting and SQLite-backed Durable Object storage. The app's Durable Object is restricted to the European Union; the front Worker, provider metadata and support systems may process data elsewhere under Cloudflare's data processing addendum and applicable transfer provisions. Netlify, Inc. provides the previous hosting deployment and encrypted app store retained temporarily for migration and rollback verification, under its data processing agreement and applicable transfer provisions. Shopify provides the platform APIs, authentication and billing under the merchant's and developer's Shopify agreements. Clearpick Pack Check will provide advance notice in the app and by an agreed contact method before appointing a new subprocessor or materially changing processing locations, allow reasonable data-protection objections, and seek a workable alternative or permit termination if an objection cannot be resolved. Clearpick Pack Check remains responsible for its subprocessors as required by applicable law.

Clearpick Pack Check will not sell or share merchant personal data for advertising, combine it for unrelated commercial profiling, or use it to make automated decisions about individuals. It will support lawful instructions concerning consent, restrictions, deletion and data-subject requests. Requests received directly from a store's customer will be referred to the merchant without disclosing order records to an unverified requester.

Clearpick Pack Check will notify the merchant without undue delay after becoming aware of a personal data breach affecting data processed for that merchant. Available information will cover the incident, affected data, likely consequences, containment and remediation, with further information supplied as it becomes available. Clearpick Pack Check will reasonably assist with relevant data-subject requests, security duties, breach notifications, impact assessments and regulator consultations, taking account of the service and information available.

Order contents and generated reports are not retained in the app’s persistent store. Scan counts remain in memory in the current tab. Encrypted sessions, agreement records, dates of meaningful use and prompt-dismissal preferences are retained while installed and removed following authenticated uninstall or shop-redaction notifications. Merchant downloads and printouts remain under the merchant’s control. Cloudflare's SQLite point-in-time recovery can retain earlier database states for up to 30 days. The previous Netlify deployment, store and its backups have separate provider retention while migration and rollback verification finish. Live shop records are deleted by authenticated uninstall or shop-redaction notifications; provider recovery retention follows the applicable data processing agreements and service policies. On restoring data, the operator must remove records for uninstalled shops before resuming service. Data retained by law will be isolated for that requirement.

On reasonable request, Clearpick Pack Check will provide information needed to demonstrate compliance and cooperate with proportionate audits by the merchant or its mandated auditor, subject to confidentiality and protection of other merchants' information. The merchant may request return or deletion of personal data processed on its behalf; the service's lack of stored order contents limits what Clearpick Pack Check can return.

Mandatory data protection law takes precedence over any conflicting provision. This agreement does not remove either party's independent legal obligations or a data subject's rights.