RC Advisor Data Protection Terms

Parties, scope and agreement

RC Advisor, operated by Shi Qi huang , an individual developer based in Zhejiang, China.

These terms apply between the merchant using RC Advisor and its operator to processing required for the service. They supplement the Terms of Service and Privacy Policy. Processing lasts for service use and the applicable retention/termination periods.

By installing or using RC Advisor, the merchant agrees to the Terms of Service and Data Protection Terms.

By installing or using RC Advisor, the merchant agrees to these Data Protection Terms. Publication does not establish that historical merchants accepted terms that were not previously available.

Roles and documented instructions

Where applicable, the merchant determines the purposes for merchant/customer data and RC Advisor processes such data to provide the service. Responsibilities and legal roles depend on the actual processing and applicable law, rather than a universal jurisdictional label.

Documented instructions consist of authorized installation/use, Shopify API/webhook interactions, configured and documented service functions and valid privacy requests. Additional instructions or requests that cannot safely be fulfilled through the service should be discussed through support@rcadvisorai.com.

The merchant is responsible for authority to provide data, lawful use, required customer notices/consents and accurate catalog/configuration. RC Advisor must limit processing to the documented functions and applicable obligations; if a requested instruction appears unlawful or unsupported, the operator will raise it with the merchant rather than silently expand processing.

Data categories, data subjects and purposes

Categories include store/application identifiers and authentication metadata/credentials, product/catalog information, recommendation/cart identifiers, order-linked attribution identifiers and merchandise revenue, and support/privacy communications. Relevant subjects include merchant users, shoppers whose orders are associated with recommendations, and people contacting support/privacy channels.

Purposes are separated: catalog/setup and fitment/recommendation functionality; optional conversion/revenue analytics; authentication/security; support; and privacy compliance. Protected order data is limited to attribution and mandatory privacy fulfillment, not recommendation generation, advertising or customer profiling.

Full raw orders/create payloads are not persisted. Customer name/email/phone/postal address is not required for fitment logic, though voluntarily supplied support messages or Shopify authentication/webhooks may contain personal information.

Optional analytics consent gating is deployed in the production backend and active V4 storefront extension. Functional recommendations remain available without optional analytics consent.

Confidentiality and security

Public application traffic uses HTTPS/TLS. Operator-supplied provider evidence supports default provider-managed encryption at rest for the current production ECS storage in Johor. This is distinct from customer-managed KMS; we do not claim customer-managed keys, guest LUKS/dm-crypt or SQLCipher.

The deployed remediation restricts privacy exports to private service-controlled paths and permissions, avoids publicly accessible export URLs, restricts production Order Debug, and applies bounded retention. The pending live-evidence and external-approval boundaries stated above still apply. Complete raw orders/create payloads are not persisted by RC Advisor.

Access is limited to people and providers who need it for the service, support or valid privacy/security work and must be handled confidentially. Future snapshots, backups and manual/off-host copies must be separately protected and verified; production disk encryption alone does not protect every copy or transfer.

No perfect-security, zero-access, certification or uninterrupted-availability guarantee is made. Report suspected incidents or unauthorized disclosure to support@rcadvisorai.com.

Retention and deletion

Under the deployed remediation and configured maintenance, detailed recommendation and order-linked attribution records are kept for at most 90 days from the recommendation's creation. Dashboard totals cover that rolling window: expired detail and its attributed revenue leave the totals. No permanent customer-linked aggregate is kept.

Protected privacy-request export artifacts are retained for at most 24 hours from creation under the deployed private-export and maintenance controls. Delivery failure does not justify indefinite retention; fulfillment must be escalated and managed securely.

RC Advisor-managed application logs and backups have a maximum 14-day retention policy, enforced by the deployed maintenance/log/backup workflows. Backups and manual/off-host copies must remain encrypted. Expiry and safe restoration depend on verified backup inventory; provider-internal copies are not claimed to follow the same deletion schedule.

Minimal pseudonymous shop/order redaction digests are retained for up to 104 days under the bounded backup policy to prevent previously deleted data from returning through eligible restores. They are not anonymous customer data and are not used for recommendations or marketing.

Authentication credentials are retained only while operationally required. Uninstall removes the affected shop's Sessions; expiry maintenance removes unnecessary expired credentials while preserving operational refreshable credentials. Catalog/mapping data remains for the merchant's service use and is removed through Shopify shop redaction.

Normal support communications are retained no longer than 90 days after the related issue is closed. Privacy/data-rights communications are retained no longer than 90 days after the request is completed. Attachments are deleted when no longer needed and no later than the applicable communication period, unless an exception applies. Sent, Trash, Gmail copies and Thunderbird local copies fall within this operator-controlled policy.

Limited communications or evidence may be kept longer when reasonably necessary for legal obligations, security investigations, dispute resolution, fraud/abuse prevention or compliance evidence. Such exceptions do not authorize general indefinite retention or silently extend the application's detailed attribution window. The reason and continued need must be reviewed.

Email providers have their own queues, logs and backup/deletion processes. We do not promise immediate physical deletion from those systems or a universal 14-day provider retention period. Local logical deletion also does not guarantee immediate erasure of filesystem free pages.

Privacy requests and Shopify workflows

Contact support@rcadvisorai.com for privacy questions or applicable access/deletion rights. Customers may also contact the relevant merchant. We verify requester authority, coordinate with the merchant and respond as required by applicable law; do not send unnecessary identity documents, passwords or access tokens.

Shopify's customers/data_request topic requests responsive customer-related data; customers/redact requests deletion of matching customer/order-linked data; shop/redact requests deletion of the shop's merchant-owned data after the Shopify lifecycle event. Our processing uses the authenticated shop and relevant order linkage, not another merchant's records.

Customer redaction removes matching order-linked recommendation/attribution records. Shop redaction removes Sessions, catalog snapshots, mappings and recommendation records while preserving shared non-customer product knowledge. Private exports are delivered through a verified, protected operator workflow, not a public link.

Support/privacy communications are handled through the operator rights workflow; they are not automatically matched or deleted by Shopify order identifiers. Requests to remove those communications and attachments are reviewed separately under the communication retention and necessary-evidence rules.

Uninstall ends service access and removes Sessions; it does not imply immediate erasure of every backup or support message. Remaining merchant data follows bounded retention and Shopify redaction. Backup restoration must not silently resurrect redacted records. These deletion/export controls are deployed; genuine Shopify privacy-event delivery remains a separate pending live validation.

Assistance and incident contact

RC Advisor cooperates with the merchant on valid privacy requests, relevant processing information and security issues within the service's scope. Contact support@rcadvisorai.com to coordinate requests, information reasonably needed to assess the described controls, or applicable compliance assistance.

If the operator becomes aware of a confirmed incident affecting merchant/customer data, the operator will notify affected merchants without undue delay and provide reasonably available information about its nature and mitigation, with updates as investigation permits. No unapproved fixed-hour deadline or guarantee that all incidents are immediately detected is promised.

Service providers and platform dependencies

Volcengine hosts the application in Johor / Asia Pacific Southeast. Application databases, authentication/runtime information, logs and protected privacy-request artifacts may be processed there. We identify the provider by its service name; this does not assert an unverified contracting legal entity.

ImprovMX forwards incoming support and privacy email. It may process sender addresses, headers, message bodies, attachments and forwarding/delivery metadata. Google/Gmail is the operator mailbox and may store those communications, sender identifiers, attachments and mailbox copies. Exact ImprovMX routing and Gmail residency are not represented as fixed.

Resend delivers outbound support/privacy email and may process sender/recipient addresses, subjects, bodies, attachments and delivery metadata. The sending domain is rcadvisorai.com; the selected sending region is Tokyo (ap-northeast-1). Resend's published information states that stored customer data is held in the United States; the sending region does not imply Tokyo-only storage. We do not intentionally use open/click tracking; Resend receiving is disabled.

Thunderbird is local operator email software, which can hold local messages and attachments. It is not automatically a separate external email processor. Shopify provides installation/authentication, Admin APIs, webhooks and storefront/cart/checkout context, and has its own terms and privacy responsibilities; Shopify is not described as our subprocessor in every context.

Providers process information for their assigned service functions and may have their own legal duties. This provider inventory is not a claim that their contractual roles, retention or transfer arrangements are identical in every jurisdiction.

International processing

Information may be processed outside a merchant's or customer's country. Known locations include application hosting in Johor, Malaysia, operator access from Zhejiang, China, and Resend sending infrastructure in Tokyo, Japan with stored data in the United States. ImprovMX and Google/Gmail infrastructure is not guaranteed to one disclosed country.

The merchant and operator must meet applicable requirements for the relevant markets and processing. This document does not assert that a specific transfer mechanism, certification or contractual safeguard has already been implemented for every flow.

Termination and changes

Uninstall or termination ends service access. Session cleanup, Shopify shop redaction, bounded detailed-data retention and the communication/necessary-evidence rules above apply; termination does not promise instant physical erasure from every provider backup.

Material provider or processing changes will be reflected in updated terms/policy and version/effective-date information made available to merchants. Additional legal or contractual authorization requirements must be addressed where applicable; these terms do not claim an automatic notification/objection workflow already exists.

The Terms of Service contain the governing-law and dispute provisions. No merchant data ownership transfers to RC Advisor through these terms.