Shopify Magic procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ Shopify's collection, use, disclosure and processing of Your Customer Personal Data (as defined in the Data Processing Addendum) is subject to these Terms, our Data Processing Addendum , and our Consumer Privacy Policy .” | Captured 2026-06-07Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ You agree, represent, and warrant that if you receive Enhanced Services from Shopify, you will comply with all requirements that apply to your customer Personal Data under Applicable Data Protection Law and as set forth in Appendix E of our Data Processing Addendum .” | Captured 2026-06-07Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “that arose during the Term.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ If you install or enable a Third Party Service for use with the Services, you grant us permission to share on your behalf, or allow the applicable Third Party Provider to access your data and other Materials and to take any other actions as required for the interoperation of the Third Party Service with the Services. Any exchange of data or other Materials or other interaction between you and the Third Party Provider is solely between you and such Third Party Provider. Shopify is not responsible for any disclosure, modification or deletion of your data or other” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “SendGrid (a Twilio Company). Your use of the Email Services is subject to Twilio's Acceptable Use Policy .” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ If you use an Amazon Pay supported payment gateway and your customers have enabled Amazon Pay, customers may purchase goods and services from your Store using Amazon Pay.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Upon completion of sign up for the Service, if you have been enrolled in Shopify Payments and you have enabled Amazon Pay within your Shopify Admin, Shopify will also create an Amazon Pay account on your behalf. If you do not wish to keep your Amazon Pay account active, it is your responsibility to deactivate it. For the avoidance of doubt, Amazon Pay is a Third Party Service, as defined in Section 9.9 of these Terms of Service.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ If you use a Meta Pay supported payment gateway and your customers have enabled Meta Pay, customers may purchase goods and services from your Store using Meta Pay.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Shopify's Email Services utilize Third Party Providers, including SendGrid (a Twilio Company). Your use of the Email Services is subject to Twilio's Acceptable Use Policy .” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “such obligations to any third party, including but not limited to any affiliates or subsidiaries of Store Owner.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “customers by short message service (SMS) messaging, including order confirmation and marketing messages (the " SMS Services "). You will only use the SMS Services in compliance with these Terms of Service and the laws of the jurisdiction from which you send messages and in which your messages are received. The SMS Services use third party providers, and your use is subject to Twilio's” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Upon completion of sign up for the Service, if you have been enrolled in Shopify Payments, Shopify will also create a Google Pay account on your behalf. If you do not wish to keep your Google Pay account active, it is your responsibility to deactivate it. For the avoidance of doubt, Google Pay is a Third Party Service, as defined in Section 9.9 of these Terms of Service.” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “in your privacy policy, and to post a link to your privacy policy prominently in your Store. The content of your terms of service and privacy policy must also (i) disclose that your Store is hosted by Shopify, and Shopify collects and processes your customers' Personal Data, for purposes including but not limited to, providing the Enhanced Services, (ii) include notice that information submitted by customers to the Store(s) will be shared with Shopify as well as third parties that may be located in other countries, in order to provide services to such users, including but not limited to the Enhanced Services, and (iii) include a link to the method by which customers may opt out or object to Shopify processing their data for certain use cases, depending on their jurisdiction here .” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Shop Users who purchase from your Shopify Store are able to view, manage, and track orders from your Shopify Store in Shop. You authorize Shopify to connect information about, or related to, Shop Users' purchases from your Store with their Shop account. Shopify may use certain information about your customers (including email address, phone number, purchase information and/or payment information) to support the processing and fulfilling of orders (e.g. order tracking), servicing Shop User accounts, and processing payments (e.g. enabling faster checkouts). Information connected with a Shop User's Shop Account is subject to the” | Captured 2026-06-07Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “You authorize Shopify to connect information about, or related to, Shop Users' purchases from your Store with their Shop account. Shopify may use certain information about your customers (including email address, phone number, purchase information and/or payment information) to support the processing and fulfilling of orders (e.g. order tracking), servicing Shop User accounts, and processing payments (e.g. enabling faster checkouts).” | Captured 2026-06-07Open source →Finding permalink → |
| Tier differences | All applicable tiers | low | “ You will pay the Fees applicable to your subscription to Online Service and/or POS Services (" Subscription Fees ") and any other applicable fees, including but not limited to applicable fees relating to the value of sales made through your Store when using all payment providers other than Shopify Payments (" Transaction Fees "), and any fees relating to your purchase or use of any products or services such as Shopify Payments, POS Equipment, shipping, apps, Themes, domain names, Shopify App Store, or Third Party Services (" Additional Fees "). Together, the Subscription Fees, Transaction Fees and the Additional Fees are referred to as the " Fees ".” | Captured 2026-06-07Open source →Finding permalink → |
| Tier differences | All applicable tiers | low | “ 9.2 Enhanced Services ” | Captured 2026-06-07Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.