Data Processing Agreement (DPA)
Last Updated: June 30, 2026
This Data Processing Agreement (“DPA”) forms part of the agreement between Echozer, a Shopify app brand operated by Bug Finder (“Echozer”, “Processor”, “we”, “our”, or “us”), and the merchant or organization using our Shopify apps (“Customer”, “Controller”, or “you”).
This DPA applies when Echozer processes Personal Data on behalf of the Customer while providing the following Shopify applications:
- Echo Swatch Color Variant Image
- Echo Bundle Quantity Breaks
By installing or using our apps, you agree to this Data Processing Agreement.
Purpose of Processing
Echozer processes Personal Data only as necessary to provide the services requested by the Customer. We process data solely according to the Customer’s instructions, as reflected through the use of our apps and services, unless we are legally required to process the data for another purpose.
Categories of Data
Depending on the app and the features you use, Echozer may process information relating to your Shopify store, including store details, products, product variants, collections, inventory, themes, files, billing information provided through Shopify, and technical information required to operate the apps.
Echozer does not intentionally collect or store your customers’ personal information unless it is necessary to provide a specific feature of the app.
Categories of Data Subjects
The Personal Data processed under this Agreement may relate to Shopify merchants, store administrators, employees, authorized users, and, where required by a specific app feature, limited information relating to customers of the Shopify store.
Customer Responsibilities
The Customer is the Controller of the Personal Data processed through our services. The Customer is responsible for ensuring that it has a lawful basis for processing Personal Data and for providing any notices or obtaining any consents required by applicable data protection laws.
The Customer is also responsible for configuring and using our services in compliance with applicable privacy laws.
Echozer Responsibilities
Echozer acts only as a Data Processor. We process Personal Data only to provide our services, improve app functionality, maintain security, provide customer support, comply with legal obligations, and perform other activities necessary to operate the apps.
Echozer does not sell Personal Data or use Customer data for advertising unrelated to the services we provide.
Security Measures
Echozer maintains appropriate technical and organizational measures designed to protect Personal Data against unauthorized access, accidental loss, alteration, disclosure, or destruction.
We regularly review our security practices and take reasonable steps to maintain the confidentiality, integrity, and availability of the information entrusted to us.
Confidentiality
Echozer ensures that employees, contractors, and authorized personnel with access to Personal Data are bound by appropriate confidentiality obligations and are permitted to access Personal Data only when necessary to perform their duties.
Sub-processors
Echozer may engage trusted third-party service providers to help deliver our services, including providers for cloud infrastructure, analytics, customer support, monitoring, communications, and security.
Echozer ensures that all sub-processors are subject to contractual obligations that provide an appropriate level of protection for Personal Data.
Echozer remains responsible for the performance of its sub-processors in accordance with applicable data protection laws.
International Data Transfers
Echozer may process or transfer Personal Data outside the country where it was originally collected when necessary to provide our services.
Where required by applicable law, Echozer implements appropriate safeguards for international data transfers, including contractual protections and other legally recognized transfer mechanisms.
Data Retention and Deletion
Echozer retains Personal Data only for as long as necessary to provide the services requested by the Customer or to comply with applicable legal obligations.
When a Customer uninstalls an Echozer Shopify app, associated store data is permanently deleted within 24 hours, unless a longer retention period is required by law.
Assistance with Data Subject Requests
Where appropriate and technically feasible, Echozer will provide reasonable assistance to Customers in responding to requests from individuals exercising their rights under applicable data protection laws, including requests for access, correction, deletion, restriction, portability, or objection.
Personal Data Breach
If Echozer becomes aware of a confirmed Personal Data breach affecting Customer data, we will notify the affected Customer without undue delay after becoming aware of the breach, as required by applicable law.
Echozer will provide available information regarding the nature of the breach and reasonable assistance in addressing its consequences.
Audits and Information
Upon reasonable written request and where required by applicable law, Echozer will make available information necessary to demonstrate compliance with this Data Processing Agreement.
Any audit or inspection must be conducted in a manner that does not unreasonably interfere with Echozer’s operations or compromise the confidentiality of other customers’ information.
GDPR Compliance
Echozer processes Personal Data in accordance with the General Data Protection Regulation (GDPR) where applicable.
Echozer implements appropriate safeguards designed to protect Personal Data and supports Customers in meeting their obligations under applicable data protection laws to the extent required for the services provided.
California Privacy Rights
Where applicable, Echozer processes Personal Data in accordance with the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and other applicable privacy laws.
Echozer does not sell Personal Data or share Personal Data for cross-context behavioral advertising.
Changes to This Agreement
Echozer may update this Data Processing Agreement from time to time to reflect changes in applicable laws, our services, or our business practices.
The updated version will be published on this page with a revised “Last Updated” date.
Contact Us
If you have any questions regarding this Data Processing Agreement or our data processing practices, please contact us.
Echozer
A Shopify app brand operated by Bug Finder
Website: https://echozer.com
Email: hello@echozer.com
