Privacy notice
Who operates Pairwise and how to contact us
Pairwise is operated by SIA Covenant, Lastadijas iela 12, Riga, 1050, Latvia. Platinum Apps is the publisher display name. For privacy questions or requests, email support@pairwiseaddons.com. Support is staffed on weekdays, with a one-business-day first-response aim; that aim is not a guaranteed service level.
Information we use
Pairwise uses Shopify store and installation identifiers; selected product and variant IDs, titles, descriptions, options, prices and availability; collection selections; product-description links and text retrieved from those links; saved suggestions, edits, offers and theme/publication state; and plan and usage information. During authentication and authorization, Shopify staff user identifiers are checked transiently; Pairwise does not store those identifiers.
With granted order access, Pairwise reads recent order line items to calculate merchant-facing product, product-pair and covered-offer totals. It uses product and variant IDs and quantities, then aggregates the rows. It does not retain order IDs or customer names, contact details, postal addresses or notes, and it does not send order rows or totals to the AI provider. Shopify separately supplies an aggregate eligible-order count for plan metering.
Purposes and personal information
Pairwise processes catalogue and aggregate order data on the merchant's instructions to provide the features described here. Account, authentication, security and support personal information is used to perform a contract where the individual is a party, and otherwise on Pairwise's legitimate interests in securely operating and supporting the service. Necessary Shopify shop access is required for the affected features. Pairwise does not make automated decisions about individuals that produce legal or similarly significant effects.
AI and service providers
To prepare offers, Pairwise sends selected catalogue text and passages retrieved from product-description links to OpenAI's Responses API. It does not send order data to the AI provider. Requests set `store: false`; this does not turn off abuse monitoring. OpenAI's standard API abuse-monitoring logs may retain prompts and responses for up to 30 days. Pairwise does not claim Zero Data Retention, Modified Abuse Monitoring or regional processing for its deployed key.
Pairwise uses Shopify for the app, store connection and billing; Render to host the service in Frankfurt; OpenAI for the described AI processing; and Google Workspace for the contact mailbox. Render log and snapshot availability does not establish when physical copies are deleted. Shopify says app-owned metafield values may be kept temporarily after uninstall and cleaned up asynchronously without a guaranteed duration. Provider and platform copies follow their applicable controls; Pairwise does not promise a physical-purge date for them.
Retention and deletion
Pairwise's service policy is to keep shop-specific data only as needed to provide the service. After a verified Shopify uninstall, Pairwise allows a 48-hour verified reconnection window. A valid signed `shop/redact` event calls for prompt deletion of Pairwise-controlled shop data. For another verified end-of-service or deletion trigger, Pairwise-controlled shop data is deleted no later than 29 days after the earliest applicable trusted trigger. A later event does not restart that period. No legal-retention exception is claimed here.
After deleting shop-specific detail, Pairwise retains limited service-wide numeric accounting and security counters for capacity and cleanup integrity. They record AI reservation totals by outcome and month and an erasure sequence; they contain no shop, request, job, hash or per-shop usage fields. Pairwise does not describe these counters as anonymous, and they do not create a legal-retention exception.
After required shop-specific erasure, a newly verified installation can receive a fresh Pairwise workspace. If Shopify confirms a current subscription, Pairwise uses the next eligible canonical observation as a fresh order-metering anchor. Shopify's current subscription, any remaining Shopify trial authority and billing period remain authoritative. Pairwise no longer enforces erased per-shop order totals, Growth choices, past Pairwise trial decisions or lifetime decisions; it cannot reconstruct deleted order history. Known retained history still applies, and service-wide numeric AI reservation totals and the shared AI ceiling remain in force. This does not reset a Shopify subscription or its charges.
Your rights and complaints
Depending on applicable law, you may have rights to request access, correction, erasure, restriction, objection or portability of personal information. You may complain to the Latvian Data State Inspectorate (DVI) or your competent local supervisory authority; see the DVI's complaint process. Contact us at the address above to exercise a right or ask a question. We may need to verify your authority to act for a shop before responding.
Merchant data addendum
You instruct SIA Covenant to process selected Shopify catalogue and order-line data to provide catalogue review, offer preparation, merchant editing and publication, theme-status, plan-access, security and support functions. Pairwise does not use order data for shopper marketing, customer profiling, ad targeting or cross-context behavioral advertising, and does not send order data to the AI provider. SIA Covenant may separately use limited account, billing, security and contact data to operate Pairwise.
Pairwise uses Shopify, Render, OpenAI and Google Workspace for the functions described above. It uses access controls, HTTPS for service and API traffic, and AES-256-GCM encryption for stored Shopify credentials. Render documents encryption at rest for its persistent disk and snapshots; Pairwise does not claim that every workspace file is application-encrypted.
The deletion schedule in the privacy notice applies to Pairwise-controlled shop data. This addendum does not promise that Shopify's asynchronous metafield cleanup, provider logs or snapshots meet that schedule, and it does not assert an unreviewed legal-retention exception.