服务条款

Scope. These terms are between ItemFits LLC (“ItemFits,” “we,” “us,” or “our”) and the merchant accepting them. ItemFits LLC provides the ItemFits Shopify service, including merchant-branded and white-label experiences. Business contact: ItemFits LLC, 401 East Jackson Street, Suite 2340, Tampa, FL 33602, United States; support@itemfits.com. These terms supplement the ItemFits Terms of Service for Shopify merchants. They govern ItemFits' processing of Shopify shopper personal data on the merchant's behalf and take precedence over conflicting general provisions about reuse of user content or anonymized data. “Personal data” includes linkable customer, visitor, session, and order identifiers, not only names or contact fields. Roles and instructions. The merchant determines the purposes and lawful basis of its store's shopper-data processing and acts as controller or business where applicable. ItemFits acts as processor or service provider for the fit-check, conversation, catalog-related shopper context, and merchant-reporting processing described in the Shopify section of the Privacy Policy. ItemFits acts independently, as a controller in its own right rather than on the merchant's instructions, for its own merchant subscription administration, account and onboarding email sent to the merchant's business contact address, security, and legal obligations. That merchant business-contact processing is not shopper personal data and is not governed by these processor terms. The merchant's authorized use and configuration of the app, these terms, and verified support requests provide the processing instructions. Instructions outside the described services require agreement before implementation. Subject matter and duration. Processing supports shopper fit questions, saved context, merchant analytics, troubleshooting, and eligible paid-order attribution where access is enabled. Data subjects are customers, prospective customers, and store visitors. Data categories include submitted dimensions and messages, fit results, activity/timestamps, product references, browser/session identifiers, verified customer bindings, permitted order details, and, where enabled, storefront commerce events recorded through a Shopify web pixel. Processing continues as required to provide the configured service and complete applicable return/deletion requests or legal retention. The Privacy Policy explains the current retention limitations; these terms do not create a shorter automatic deletion schedule that the service has not implemented. Purpose limitation. ItemFits will process shopper data only to provide the documented services on the merchant's instructions, or where legally required. It will not sell shopper data, share it for targeted advertising, use identifiable Shopify shopper data to train models, or market to shoppers using it. Broader permissions elsewhere in the general terms do not authorize those uses. ItemFits will not use shopper data from different merchants to create advertising profiles. Aggregated data. The merchant authorizes ItemFits to derive and retain aggregated, de-identified statistics from store data for the purposes described in the Shopify Privacy Policy section. ItemFits will not attempt to re-identify a shopper and will not disclose a store's individual figures to another merchant or third party. Naming the store, using its logo, or publishing its individual results requires the merchant's separate, revocable permission. Merchant responsibilities and consent. The merchant is responsible for appropriate notices, a lawful basis, and obtaining consent where required. ItemFits is responsible for applying the controls it provides and following lawful, supported instructions. App installation, API authorization, and a merchant's cookie banner do not alone demonstrate shopper consent enforcement. The merchant must confirm that required choices and withdrawals can be implemented before enabling consent-dependent analytics. If required controls are unavailable, that processing must remain disabled or be suspended; neither party may treat these terms as a substitute for the controls. Confidentiality and safeguards. ItemFits will restrict access to authorized personnel and service providers who need data for the documented purpose, maintain appropriate confidentiality obligations, and use safeguards appropriate to the processing. These include authenticated access, store-scoped access restrictions, signature validation, server-side service credentials, and protected public transport. ItemFits will notify the merchant without undue delay after becoming aware of a personal-data breach affecting its shopper data and provide available information and reasonable cooperation for the merchant's response obligations. Service providers and transfers. The Shopify Privacy Policy section identifies the service providers and purposes. The merchant authorizes their use for those purposes subject to applicable processing and confidentiality terms. ItemFits remains responsible for its processor obligations and will provide information about relevant provider changes so the merchant can raise a reasonable data-protection objection before continuing affected processing. Where applicable law requires additional international-transfer terms or a specific data-processing agreement, the parties must put those arrangements in place before the affected processing; this page does not execute unspecified transfer documents. Requests, deletion, and assistance. ItemFits will reasonably assist the merchant with access, correction, erasure, restriction, and objection requests, taking account of the nature of processing and information available. Shopify privacy notifications and verified support requests are request channels, not a guarantee of instantaneous deletion of every dataset or backup. On termination or a verified instruction, ItemFits will cooperate in returning or deleting the applicable shopper data, subject to legal requirements, and explain any outstanding copies, limitations, or required retention. The merchant's copies and exports remain the merchant's responsibility. Deletion and retention controls must be verified before making representations about a specific deadline. Information and review. ItemFits will provide information reasonably needed to assess its processing obligations and cooperate on an appropriate review, subject to protection of other merchants' data and service security. If an instruction appears incompatible with applicable data-protection requirements or cannot be fulfilled using the available service controls, ItemFits will inform the merchant so the instruction can be resolved or the affected processing suspended. Contact. Send merchant data-processing questions, requests for additional contractual terms, or instructions to support@itemfits.com and identify your store domain. Publication of these terms does not represent Shopify approval, a completed privacy audit, or acceptance by all existing merchants.