Data Processing Agreement

1. Scope

This DPA forms part of the agreement between Cadence ("Processor") and the Shopify merchant ("Controller") for processing personal data in connection with the Cadence Services.

2. Processing Details

Subject matter: Lifecycle marketing intelligence for Shopify merchants.

Duration: For the term of the merchant's subscription.

Nature and purpose: Analysis of order data to identify lifecycle moments; triggering marketing events in connected platforms.

Data subjects: Merchant's customers and website visitors.

Data categories: Names, email addresses, purchase history, product preferences, lifecycle states.

3. Processor Obligations

Cadence shall process data only on documented instructions, ensure confidentiality, implement security measures, assist with data subject requests, notify of breaches, and delete data upon termination.

4. Sub-processors

• Amazon Web Services — cloud hosting (United States)
• Amazon SES — transactional email (United States)
• Shopify — e-commerce platform (United States/Canada)

5. Data Retention and Deletion

Upon app uninstall, Shopify sends a shop/redact webhook 48 hours later. Cadence deletes all store data upon receipt, including customer records and predictions.

6. Contact

For DPA inquiries: team@rightcadence.com