Merchant data-processing terms
Version 1.0 — effective September 18, 2026
These terms describe how atoz advert online seller ("RoutiVox", "we", "us"), located at Sharooq Land 2, 1012, Dubai Land Residence, Dubai, United Arab Emirates, processes personal data on behalf of a merchant ("you") who installs the RoutiVox app on a Shopify store. By installing or continuing to use RoutiVox, you agree to these terms. In this relationship you act as the data controller/business for your store's customer data, and we act as your data processor/service provider, processing that data only on your instructions as set out below. See also our merchant privacy notice, which describes the same processing to end customers.
1. Roles and effective date
These terms take effect when you install RoutiVox and remain in effect until your installation ends (uninstall or shop redaction). RoutiVox is the processor; you are the controller of your store's customer data. Each is responsible for its own compliance obligations in that role.
2. Processing instructions
You instruct RoutiVox to process order and customer data to: route and tag orders to merchant-defined branches based on shipping-area mapping, send branch email notifications, generate merchant-selected reports and automations you configure, provide support, and fulfill Shopify customer data request, customer redaction, and shop redaction requests. RoutiVox will not process data for any other purpose without your separate authorization.
3. Data subjects and categories
The data subjects are your store's customers. The categories processed are order identifiers and numbers, line items and order notes, customer name, email, and phone, and shipping address fields, plus your shop domain, display name, branch contact details, and app configuration. RoutiVox does not require and does not process payment-card data.
4. Duration and deletion
Dispatch log entries are retained for 90 days by default and then deleted by an automated cleanup job. Branch contact details and configuration are retained while you use the app. On shop redaction (uninstall plus Shopify's redaction webhook, or your written request), RoutiVox deletes or irreversibly anonymizes the corresponding data, except where it remains temporarily in encrypted backups as described below. Encrypted backup copies are deleted on the same 90-day cycle; if a new backup fails, the most recent successful copy may be retained longer than 90 days until backups resume.
5. Security measures
RoutiVox uses least-privilege, MFA-protected production accounts limited to a single named operator; encrypts customer-linked log fields and merchant settings at the application level; uses HTTPS and TLS for all public traffic, database connections, and outbound email; logs access to personal data; maintains a written incident response process; and keeps production and development environments and credentials separate. Full detail is in our internal Operations Security Policy and Data Loss Prevention Policy, available on request.
6. Subprocessors and data location
RoutiVox uses Railway Corporation to host the application, database, and encrypted backups (United States region), and Plus Five Five, Inc. (Resend) to deliver branch notification and privacy-request email (message content and delivery logs stored in the United States). We will not add a new subprocessor that materially changes how your data is handled without posting an update to this page and, where required, notifying you directly.
7. Assistance
RoutiVox will assist you with customer access, correction, and deletion requests you receive by honoring the corresponding Shopify compliance webhooks and by responding to requests you forward to info@atozadvert.com. We will notify you without undue delay if we become aware of a security incident affecting your store's data, and will reasonably cooperate with an audit of our processing on request, subject to confidentiality.
8. Limits on use
RoutiVox will not use your store's customer data for advertising, resale, or any analytics unrelated to providing the app's features, and will not sell this data, without your separate written authorization and notice.
9. Your responsibilities
You are responsible for the accuracy of branch recipient addresses you configure, for limiting staff access to branch notification content to those who need it, and for giving your customers any notices required by law for the processing described here and in our privacy notice.
10. Notices, law, and acceptance
We will post material changes to these terms on this page with an updated effective date and, where required, notify you directly. These terms are governed by the laws of the United Arab Emirates. Installing or continuing to use RoutiVox on your store constitutes acceptance of the version of these terms then posted here. Questions: info@atozadvert.com.