Privacy Policy
Architechpro — Privacy Policy
Effective date: 16 Oct 2026
1. Who We Are
Architechpro OÜ ("Architechpro", "we", "us") is a company registered in Estonia, registry code 14325763, with its registered address at Sepapaja 6, Tallinn 15551, Estonia. We build and operate apps for the Shopify App Store (the "Apps") and run the website architechpro.com (the "Website").
For any question about this Policy or your personal data, contact us at contact@architechpro.com.
2. Our Two Roles
We are the controller for personal data we process for our own purposes: about merchants who install our Apps and their staff, Website visitors, people who contact our support, and business contacts. This Policy describes that processing.
We are a processor for personal data of merchants' customers, students, members, and store visitors that our Apps process on a merchant's behalf. For that data, the merchant is the controller and decides how it is used. We process it only on the merchant's instructions under our Data Processing Agreement, which forms part of our Terms of Service and is available to merchants on request at contact@architechpro.com. If you are a customer of a Shopify store that uses our Apps, please read that store's privacy policy and contact the store first. Section 5 explains what data each App processes.
3. Personal Data We Process as Controller
The table shows what we collect, why, on which legal basis under Article 6(1) GDPR, and how long we keep it.
|
Purpose |
Personal data |
Legal basis |
Retention |
|---|---|---|---|
|
Installing and providing the Apps to merchants |
Store name and URL, store owner and staff names and emails, Shopify account IDs, App settings |
Performance of contract (Art. 6(1)(b)) |
While the App is installed, then up to 14 days after Shopify's store erasure request |
|
Billing and accounting |
Plan, charges, invoices, company details received from Shopify |
Legal obligation (Art. 6(1)(c)) |
7 years, as required by Estonian accounting law |
|
Customer support and calls |
Name, email, store URL, messages, call bookings, call recordings if you agree to recording, screenshots you send |
Performance of contract; legitimate interest in helping merchants (Art. 6(1)(f)) |
24 months after the conversation ends |
|
Security, fraud prevention, and error monitoring |
IP address, device and browser data, logs, error reports |
Legitimate interest in keeping the Apps secure and working (Art. 6(1)(f)) |
Logs up to 90 days; security incident records up to 3 years |
|
Product analytics and improvement |
Usage of App features, install and uninstall events, plan changes |
Legitimate interest in improving our Apps (Art. 6(1)(f)) |
24 months, then aggregated or anonymized |
|
Website analytics |
Pages visited, approximate location, device data, cookie identifiers |
Consent (Art. 6(1)(a)) |
Up to 14 months |
|
Product news and marketing emails to merchants |
Name, email, Apps installed |
Legitimate interest for existing merchants, with an easy opt-out; consent where the law requires it |
Until you unsubscribe |
|
Legal claims and compliance |
Any of the above, as needed |
Legal obligation; legitimate interest in establishing or defending claims |
For the applicable limitation period |
Where we rely on legitimate interest, we have balanced it against your rights. You can object at any time (see Section 9). Where we rely on consent, you can withdraw it at any time without affecting earlier processing.
We receive most merchant data from Shopify when you install an App, and the rest directly from you.
4. Data from Shopify
When you install an App, Shopify asks you to approve the access (scopes) the App needs. We access only that data and use it only to provide the App. We respond to the mandatory privacy requests Shopify sends us: requests for a customer's data, requests to erase a customer's data, and requests to erase a store's data after an App is uninstalled.
5. Data Our Apps Process on Behalf of Merchants
We process the data below as a processor, only to provide the App's features to the merchant. The merchant decides what data its store sends to the App.
|
App |
Main categories of personal data |
|---|---|
|
Courses Plus |
Students' and customers' first and last name, phone, email, address, course progress, quiz answers, IP address |
|
Mega Community |
Members' name, email, profile picture, posts, comments, uploaded files, activity |
|
Mega PDF Invoices |
Customers' name, email, phone, billing and shipping address, order details, tax ID if provided |
|
Subscriptions Plus |
Customers' name, email, billing address, subscription contracts. Payment details stay with Shopify. |
|
Mega Callback |
Name, phone number, preferred call time, message, IP address |
|
Mega Better Price |
Name, email, product, message, files provided with the request, IP address |
|
Mega GDPR Data Compliance |
Visitors' consent choices and timestamps, privacy request details (name, email) |
|
Customer Login Manager |
Customers' email, IP address, device and browser data |
|
Workflow Triggers and Actions |
Customers' first and last name, data the merchant chooses to send through webhooks |
|
Mega Facebook Comments |
None. The comments plugin loads directly from Meta, which processes comment data under its own terms. |
|
Mega Media and Image Exporter, Animify, Mega Anti-Theft, Laundry Symbols Clothing Care |
No customer personal data |
We keep this data while the App is installed and delete it within 14 days after Shopify's store erasure request, with backup copies removed within 30 days, unless the merchant deletes it earlier or the law requires us to keep it.
6. Who We Share Data With
We do not sell personal data. We share it only with:
- Service providers who process data for us under contract: hosting, content delivery, email delivery, customer support, call scheduling, error and performance monitoring, source code hosting, and AI services. The current list, with locations and transfer safeguards, is set out in our Data Processing Agreement, which merchants can request at contact@architechpro.com.
- Shopify, as the platform on which our Apps run and through which billing is handled.
- Our team members and contractors, who access data only as needed for their work and are bound by confidentiality.
- Professional advisers, such as lawyers and accountants, under confidentiality.
- Authorities, where we are required by law.
- A buyer or successor, if our business or Apps are sold or merged, under this Policy.
We do not let advertising networks use personal data from our Apps. Shopify and Meta (for the comments plugin used by Mega Facebook Comments) process data under their own terms as independent parties, not as our service providers.
7. AI-Powered Features
We use OpenAI to generate content when you use an App feature that offers it. Only the content the feature needs (for example, the text you ask the App to write or rewrite) is sent to OpenAI, through its business API. We use Anthropic's AI tools to support our own software development, such as code analysis and debugging. Under these providers' business API terms, data sent through their APIs is not used to train their models.
8. International Transfers
We are based in the EU. Our Apps are hosted in the EU (Amazon Web Services, Frankfurt) and in the United States (Amazon Web Services and Laravel Cloud), and some hosting is provided from Singapore. Some service providers, and some of our team members and contractors, are located outside the European Economic Area, including in the United States, the United Kingdom, Singapore, Ukraine, and Georgia. These countries may not offer the same level of data protection as the EU.
When personal data is transferred outside the EEA, we use one of the following safeguards:
- an adequacy decision of the European Commission, where one exists;
- the EU-U.S. Data Privacy Framework, for US providers certified under it; or
- the European Commission's Standard Contractual Clauses (Implementing Decision (EU) 2021/914), together with additional measures where needed.
You can ask us for a copy of the relevant safeguards at contact@architechpro.com.
9. Your Rights
Under the GDPR, you have the right to:
- access the personal data we hold about you and receive a copy;
- correct inaccurate or incomplete data;
- have your data erased, where there is no reason for us to keep it;
- restrict our processing in certain cases;
- receive your data in a portable format and transfer it to another provider;
- object to processing based on legitimate interest, including direct marketing at any time; and
- withdraw consent at any time, where we rely on consent.
To exercise a right, email contact@architechpro.com. We may ask you to confirm your identity. We reply within one month, which can be extended by two months for complex requests, as allowed by the GDPR.
If your request concerns data that an App processes for a Shopify store, we will forward it to the merchant, who is the controller, and help them respond.
10. Security
We protect personal data with appropriate technical and organizational measures, including encryption in transit, access control based on need, multi-factor authentication for internal systems, logging, and regular backups. These measures are described in more detail in our Data Processing Agreement, available to merchants on request. No system is completely secure, and we will notify affected people and authorities of personal data breaches where the law requires it.
11. Cookies on Our Website
Our Website uses strictly necessary cookies to work, and analytics cookies, such as Google Analytics, only with your consent. You can change your choice at any time through the cookie settings link in the Website footer. Our Apps may use cookies or similar storage in a store's storefront to provide their features. Merchants are responsible for including these in their own cookie notices.
12. Children
Our Website and Apps are intended for businesses. We do not knowingly collect personal data from children for our own purposes. Merchants who use our Apps with children's data, for example in courses, are responsible for meeting the legal requirements that apply.
13. Changes to This Policy
We may update this Policy. We will publish the new version with its effective date and notify merchants of material changes by email or in the Apps.
14. Contact and Complaints
Architechpro OÜ, Sepapaja 6, Tallinn 15551, Estonia Email: contact@architechpro.com
If you believe we process your data unlawfully, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, Estonia, www.aki.ee, or to the supervisory authority in the EU country where you live or work. We would appreciate the chance to resolve your concern first.