Terms of Service
These Terms of Service ("Terms") govern the use of the Stashlist wishlist application for Shopify ("the Service") by the merchant installing it ("you", "the Merchant"). By installing or using the Service you agree to these Terms.
1. The Service
Stashlist provides wishlist functionality for Shopify stores, including wishlist storage, storefront display components, merchant analytics, customer alerts (such as price drop and back in stock events), and integrations with third-party marketing and loyalty platforms.
2. Fees and Billing
The Service is billed through Shopify's billing system on a recurring 30-day cycle at the plan price shown at the time of subscription. Plans include a 30-day free trial. Subscriptions can be cancelled at any time by uninstalling the app or cancelling in your Shopify admin; charges already incurred are non-refundable except where required by law.
3. Acceptable Use
You agree not to use the Service to violate any law, Shopify's terms, or the rights of your customers; not to attempt to gain unauthorized access to the Service or its infrastructure; and not to resell or redistribute the Service without our written consent.
4. Data Processing
Roles. For personal data of your customers processed through the Service, you are the data controller and Stashlist acts as a data processor, processing such data only on your behalf and instructions as set out in these Terms.
Data processed. The Service processes the following customer personal data: email address, first and last name, email marketing consent state, Shopify customer ID, and wishlist activity (products saved, removed, shared, and purchased). Stashlist does not process customer phone numbers, physical addresses, or payment details.
Purposes. Customer personal data is processed solely to provide the Service: operating wishlists tied to customer accounts, displaying wishlist information in your admin, sending wishlist events to marketing and analytics integrations you have enabled, and measuring wishlist conversion. Stashlist does not sell customer personal data or use it for its own marketing.
Subprocessors. Stashlist uses the following subprocessors to operate the Service: Railway (application hosting and database), Cloudflare (website and content delivery), Resend (transactional email), and Upstash (job scheduling). Where you enable an integration (for example Klaviyo, Omnisend, Attentive, Mailchimp, Maestra, LoyaltyLion, Rivo, Judge.me, Yotpo, Reviews.io, or Gorgias), customer data is shared with that provider at your direction under your agreement with that provider.
Security. Data is encrypted in transit (TLS) and at rest. Access to production systems is limited to authorized personnel and protected by strong authentication. Backups are encrypted. Staff access to customer personal data is logged. Stashlist maintains a security incident response policy and will notify affected merchants without undue delay, and within 72 hours, of confirming a personal data breach affecting their customers' data.
Retention and deletion. Customer personal data is retained only while the app is installed. On uninstall, all shop data — including customer personal data — is permanently deleted in line with Shopify's data deletion webhooks. Stashlist honours Shopify's GDPR webhooks for customer data access and erasure requests.
International transfers. Where personal data is transferred outside the region in which it was collected, Stashlist relies on its subprocessors' compliance mechanisms, including standard contractual clauses where applicable.
Your responsibilities. You are responsible for ensuring you have a lawful basis for the processing carried out through the Service, for your own privacy notices to customers, and for the configuration of any third-party integrations you enable.
5. Intellectual Property
The Service, including its code, design, and branding, remains the property of Stashlist. You retain all rights to your store's data and your customers' data.
6. Availability and Support
We aim to keep the Service available at all times but do not guarantee uninterrupted operation. Support is available at support@stashlist.net.
7. Disclaimers and Liability
The Service is provided "as is" without warranties of any kind. To the maximum extent permitted by law, Stashlist's total liability arising out of or relating to the Service is limited to the fees you paid for the Service in the three months preceding the claim. Stashlist is not liable for indirect, incidental, or consequential damages, including lost profits or lost data.
8. Termination
You may stop using the Service at any time by uninstalling the app. We may suspend or terminate access for breach of these Terms with reasonable notice where practicable. On termination, your data is deleted as described in section 4.
9. Changes
We may update these Terms from time to time. Material changes will be announced via the app or by email. Continued use of the Service after changes take effect constitutes acceptance.
10. Contact
Questions about these Terms: support@stashlist.net.