Data processing addendum

Draft effective 3 September 2026

This addendum describes Joon’s processing of personal data for a merchant using the service. It supplements the Terms of Service. The merchant is the controller or business and the Joon operator is the processor or service provider unless applicable law assigns different roles.

Instructions and purpose

We process personal data only on the merchant’s documented instructions, including the configuration and approved actions made through Joon, to synchronize Shopify data, build eligible audiences, generate approved email, enforce suppression, measure holdouts, provide support and secure the service.

People, data and duration

Data may concern merchant staff, customers and storefront visitors. It may include identifiers, contact details, consent status, commerce history, product interests, minimized storefront events and email-delivery events. Processing continues while the merchant uses Joon and for the documented deletion and legal-retention periods after termination.

Confidentiality and security

People authorized to process personal data are bound by confidentiality. Technical and organizational measures include tenant-scoped authorization, encrypted Shopify credentials, signed requests, restricted production secrets, delivery approval and suppression controls, idempotency, logging, backups and incident procedures appropriate to the deployment.

Subprocessors

The merchant authorizes the providers on the subprocessor list. We remain responsible for requiring subprocessors to protect data consistently with this addendum. Material changes will be published there before they take effect where reasonably possible.

Requests, incidents and audits

We will reasonably assist with data-subject requests, security incidents, impact assessments and regulator inquiries relating to the service. We will provide information reasonably necessary to demonstrate compliance, subject to confidentiality and security limits.

Deletion and return

At termination or on a valid instruction, we delete or return personal data unless law requires retention. Shopify customer and shop redaction requests are processed through authenticated mandatory webhooks.

International transfers

Where personal data is transferred internationally, the parties will use a lawful transfer mechanism required for the relevant locations.

This is an implementation-ready draft, not an executed agreement. The legal operator, registered address, governing terms, transfer mechanism, security schedule and signature blocks require counsel/founder approval before public submission.