Terms of Service
Last updated:March 18,2026
1. Introduction
By installing V1 Cart Suite ("the app","we","our") on your Shopify store,you ("the merchant","you") agree to these Terms of Service,including the Data Processing Agreement below. These terms supplement the Shopify Partner Agreement and Shopify API Terms of Use.
2. Service Description
V1 Cart Suite is a Shopify application that provides merchants with a customizable cart experience,including upsells,rewards,promotions,A/B testing,and full design control. The app consists of an admin interface for configuration and a storefront theme extension that renders the cart on your online store.
3. Data Processing Agreement
This Data Processing Agreement ("DPA") governs the processing of data in connection with V1 Cart Suite. It supplements our Privacy Policy.
3.1 Roles
You (the merchant) act as the Data Controller. V1 Cart Suite acts as the Data Processor,processing data only on your behalf and in accordance with your instructions as expressed through your use of the app.
3.2 Scope of Processing
We process data solely as described in our Privacy Policy. Processing activities are limited to providing the functionality of the app,including cart configuration,analytics,and billing.
3.3 Data Processed
- Shopify session tokens (required for app authentication)
- Aggregated order counts and revenue totals (for billing and analytics)
- Custom cart attributes (
_v1_*) for A/B test variant tracking and zone attribution
We do not process customer personally identifiable information (PII) such as names,emails,addresses,or phone numbers.
3.4 Sub-processors
- Cloudflare — Infrastructure provider (Workers,D1 database). Cloudflare processes requests in accordance with their Data Processing Agreement.
No other sub-processors are used.
3.5 Security Measures
- All data in transit is encrypted via TLS
- Data at rest is encrypted via Cloudflare D1
- Authentication is handled through Shopify's OAuth flow
- No customer PII is stored in our database
3.6 Data Deletion
All data associated with your store is deleted upon app uninstallation,triggered automatically via Shopify's app uninstall webhook. Aggregated billing counters may be retained for accounting purposes in accordance with our Privacy Policy.
3.7 Compliance
This DPA is designed to meet the requirements of the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). As a data processor,we process data only as instructed by you and implement appropriate technical and organizational measures.
4. Merchant Obligations
You are responsible for maintaining your own privacy notices to your customers. If you use features such as A/B testing that store cart attributes,you should disclose this in your store's privacy policy as appropriate under applicable law.
5. Limitation of Liability
To the maximum extent permitted by applicable law,V1 Cart Suite shall not be liable for any indirect,incidental,special,consequential,or punitive damages,or any loss of profits or revenue,whether incurred directly or indirectly,or any loss of data,use,goodwill,or other intangible losses resulting from your use of or inability to use the app.
Our total liability for any claim arising from these terms or your use of the app shall not exceed the amount you paid us in the twelve (12) months preceding the claim.
6. Termination
This agreement is effective as long as V1 Cart Suite is installed on your Shopify store. Uninstalling the app terminates this agreement. Upon termination,all your data is deleted in accordance with our data retention policy described in section 3.6 and our Privacy Policy.
7. Contact
If you have questions about these terms or the Data Processing Agreement,please use the contact form at the bottom of our homepage.