Data processing agreement

Last updated October 26, 2026

This agreement applies when a store (“you”) installs the Otto Delivers Shopify app. It forms part of the terms you accept on install. You decide why and how your customers’ data is used and are the controller; Otto Delivers (“Otto”) processes it on your behalf as your processor.

What Otto processes

• Customers: name, email, phone number if you provide it, delivery address.
• Orders: items, order and fulfillment dates, carrier and tracking details.
• From the order page: update requests, messages, delivery-prep checklists, damage reports and the photos attached to them.

Otto uses this only to run the customer order page, send stage updates and check-ins in your name, and pass requests and damage reports to you. Otto never sells it, uses it for advertising, or uses one store’s customer data for another store.

Your instructions

Otto processes personal data only to provide the app as you configure it, and on your other documented instructions. If an instruction would break data-protection law, Otto will tell you.

Confidentiality and security

Only people who need access to run or support the app have it, and they are bound to keep it confidential. Data is encrypted in transit and at rest, access is limited by role, and the app requests only the Shopify permissions it needs.

Subprocessors

• Vercel: application hosting.
• Supabase: database and photo storage.
• Resend: sending emails to your customers in your name.

Each is bound to data-protection terms at least as protective as these. We’ll update this list, with notice to installed stores, before adding a new subprocessor; you can uninstall if you object.

Requests from your customers

Otto supports Shopify’s privacy requests: when a customer asks for their data or asks to be erased, Shopify notifies Otto and we fulfil it. For anything else, we’ll help you respond to a customer exercising their rights.

Security incidents

If we become aware of a breach affecting your customers’ data, we’ll tell you without undue delay, with what we know and what we’re doing about it, so you can meet your own obligations.

Retention and deletion

Damage-report photos are deleted 90 days after they are uploaded. When you uninstall the app, Otto deletes your store’s data once Shopify sends its shop-erasure request, which follows uninstall.

Where data is processed

Otto and its subprocessors process data in the United States. Where the law requires a transfer mechanism, such as the EU Standard Contractual Clauses, it applies between us.

Questions and audits

Ask us anything about how your customers’ data is handled at hello@ottodelivers.com. We’ll give you the information you need to show you’re compliant. See also our privacy policy for this website.