CopyPilot AIData processing summary
Roles
- Merchant: controller of storefront customer data in Shopify
- Fixiby Software Technologies: provider of CopyPilot AI; processor of product content needed to run the app; controller of B2B account/billing metadata
- Shopify: platform provider
Categories
| Category | Examples | Collected? |
|---|---|---|
| Shop identifiers | shop domain, shop_id | Yes |
| Product content | title, body HTML, media, SEO fields | Yes (to provide the service) |
| Billing | plan, credits, charge IDs | Yes |
| Customers / orders | PII, addresses, payment instruments | No — no customer/order scopes |
Shopify mandatory compliance webhooks
Fixiby implements HMAC-verified endpoints for:
customers/data_requestcustomers/redactshop/redactapp/uninstalled(recommended hygiene)
Production endpoints on fixiby.vercel.app:
POST /api/webhooks/compliancePOST /api/webhooks/app-uninstalled
Subprocessors (typical)
- Shopify Inc. — Admin API, Billing, webhooks
- Vercel Inc. — hosting for the public site and webhook handlers
- Optional AI inference — product text / locale only
Merchant checklist
- Link Privacy Policy in Partner Dashboard → App listing
- Confirm
SHOPIFY_API_SECRETis set on Vercel for HMAC verification - Run
shopify app deployso TOML webhook subscriptions register
This summary is not a signed DPA. Enterprise merchants may request a formal DPA at info@fixiby.com.