Privacy policy
Last updated:
This English version is a translation provided for convenience. If the two versions differ, the French version prevails.
Phosphor is a service that assists Shopify stores with their customer support. This policy explains what data we process, why, with whom, and for how long. It is written to be read, not to be endured.
1. Data controller
Léo Ledenvic, sole proprietor (micro-enterprise), 14 avenue de Couely, 44630 Plessé, France, ledenvicl@gmail.com.
Two distinct roles. For the merchant's data (its account, its subscription), we are the data controller. For the data of the store's end customers (orders, messages), we act as the merchant's processor: the merchant decides how it is used, and we process it only to perform the service the merchant asks of us.
2. Data processed
Merchant account
- Email address and, if Google login is used, Google name and identifier.
- Domain name of the Shopify store, plan subscribed to, monthly order volume (a simple counter, read again every night, with no order content or amount).
- Settings: tone of replies, first name used as the signature, rules, support page colors.
No password is stored: login is by one-time code or through Google.
Data from the Shopify store
The app asks Shopify for read permissions:
read_orders: number, date, status, amount, items and shipping address of orders;read_fulfillments: shipment tracking and delivery dates;read_products: catalog, to answer product questions;read_customers: name, email address and purchase history of the customer who writes in, in order to find their order.
No phone number is read, either on the customer profile or on order addresses.
Only one write permission exists: write_orders, used for two specific actions: correcting the shipping address of an unshipped order at the customer's request (option off by default, which the merchant can turn on), and carrying out a refund or a cancellation decided and triggered by the merchant itself from its dashboard. The artificial intelligence can neither decide on nor trigger a refund or a cancellation. No other change to the store is possible.
We access neither payment methods nor bank details: Shopify does not expose them and we do not ask for them.
Support messages
The content of the requests sent by end customers through the support page, the replies given, and the merchant's internal notes.
Technical data
Server logs (date, route called, response code, store identifier) kept for security and troubleshooting. IP address used only to limit abuse in the sending of login codes.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Providing the service: reading the order, writing and sending the reply to the customer | Performance of the contract with the merchant |
| Managing the account, the subscription and the plan limits | Performance of the contract |
| Service emails (request received, reply available, plan alerts) | Performance of the contract |
| Security, abuse prevention, technical logs | Legitimate interest |
| Review request after resolution | Legitimate interest of the merchant, can be turned off in the settings |
| Accounting and tax obligations | Legal obligation |
4. What we do not do
- No resale of data, to anyone, in any form.
- No training of artificial intelligence models on your data or on your customers' data. Our AI provider (Anthropic) is contractually committed not to train its models on the data received through its API.
- No advertising, no advertising trackers, no data brokers.
- No non-essential cookies. We use only a session cookie, strictly necessary for login, and a cookie that remembers the chosen display language. They do not require a consent banner.
5. Sub-processors
The service relies only on the following providers:
| Provider | Role | Location |
|---|---|---|
| Railway Corporation | Hosting of the app and the databases | United States |
| Functional Software, Inc. (Sentry) | Monitoring of technical errors: reports are redacted before they are sent and contain no email, no message and no customer access link | European Union (Germany) |
| Anthropic, PBC | AI models that classify requests and write replies | United States |
| Resend | Sending of transactional emails | United States |
| Shopify Inc. | Source of order data and billing of subscriptions | Canada / international |
| Google Ireland Ltd. | The "Continue with Google" login, if the merchant chooses it | European Union / United States |
Transfers outside the European Union. Our company is established in the United States, as are several of these providers: data is therefore transferred there. These transfers are governed by the European Commission's standard contractual clauses and, for the providers that adhere to it, by the EU-U.S. Data Privacy Framework.
6. Retention periods
- Tickets and messages: for the entire duration of the subscription, then deleted when the app is uninstalled (see below).
- Merchant account: until it is deleted, at the merchant's request.
- Technical logs: 30 days.
- Accounting documents: for the statutory retention periods that apply to us.
When the app is uninstalled, Shopify notifies us and all of the store's data (tickets, messages, notes, rules, statistics) is purged automatically within a maximum of 48 hours. If an end customer exercises their right to erasure with the merchant, Shopify forwards the request to us and the messages concerned are anonymized.
7. Security
- Encryption in transit (HTTPS/TLS) on all pages and interfaces.
- No password stored; one-time login codes, valid for 10 minutes.
- Strict separation of data by store.
- Access to the databases limited to the people for whom it is strictly necessary.
8. Your rights
In accordance with the GDPR, you have a right of access, rectification, erasure, restriction, objection and portability regarding your data.
- You are a merchant: write to ledenvicl@gmail.com. Reply within one month at most.
- You are a customer of a store: contact that store directly, as it decides how your data is used. We act on its instructions.
You can also lodge a complaint with the CNIL (www.cnil.fr).
9. Changes
Any change to this policy will be published on this page with a new update date. In the event of a significant change, merchants will be notified by email.