This Privacy Policy explains how EverSubs (“we”, “us”) collects, uses, and protects personal data in connection with our Shopify app and related services.
The controller responsible for EverSubs is Tomorrowfy GmbH, Ungererstr. 129, 80805 Munich, Germany. You can reach us at privacy@eversubs.app.
For data-protection matters you can also write to the above postal address and add “Data Protection”.
This notice covers personal data processed when you install and use EverSubs in Shopify, access our APIs, or contact our support team.
This Privacy Policy applies to merchants and their staff who install or use EverSubs in their Shopify store, and to visitors who contact us or interact with our website. For customers of a merchant’s Shopify store (subscribers), we process data strictly on behalf of the merchant; please refer to the privacy policy of the store you purchased from.
For data synced from Shopify about your subscribers and their orders, you are the controller and Tomorrowfy GmbH acts as your processor under applicable data protection law. For data we collect directly about you as a merchant (e.g., account, billing, and correspondence data), Tomorrowfy GmbH is the controller under the GDPR.
Our data-processing terms apply to subscriber data we process on your behalf. If you need a signed DPA, contact us at privacy@eversubs.app.
Merchant account and billing data (store name, shop domain, contact person, plan selection, configuration choices, payment status) to provide the app and billing features. Legal basis: Art. 6(1)(b) GDPR (performance of contract).
Operational and security logs (technical identifiers, timestamps, API requests, IP address, device / browser data) to ensure availability, detect misuse, and troubleshoot errors. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in security and stability).
Subscriber and order data from Shopify(customer identifiers and contact data, subscription contract details, fulfillment preferences, product and payment status) to execute subscription billing, retries, notifications, and related features on your behalf. We do not receive or store full payment card numbers; payments are processed by Shopify Payments or your chosen provider, and we only receive non-sensitive payment metadata (e.g., payment status, card brand, last 4 digits where provided). Legal basis: Art. 6(1)(b) GDPR (your contract with the data subject) and Art. 6(1)(f) GDPR (legitimate interest in operating the app); processing under a data-processing relationship with you.
Support communications (content of your inquiries, attachments, contact details) to answer requests and improve the service. Legal basis: Art. 6(1) (b) and (f) GDPR (contract and legitimate interest in support quality).
Compliance data (records required by tax, accounting, and retention rules) to meet legal obligations. Legal basis: Art. 6(1)(c) GDPR.
If we rely on legitimate interests, we balance our interest in operating a secure, reliable service against your interests and rights and implement safeguards accordingly.
We do not sell personal data. We share it only with:
Shopify, to synchronize subscription contracts and otherwise operate the app as part of your Shopify store.
Infrastructure, email, analytics, monitoring, and customer support providers that act as processors under data protection agreements (e.g., hosting in Google Cloud).
Authorities or third parties when required by law, a valid legal request, or to protect the rights, property, or safety of EverSubs, our merchants, or others.
Where processors are located outside the EU/EEA, we use safeguards such as the EU Standard Contractual Clauses and technical measures (encryption in transit and at rest) to protect data.
We keep personal data for the duration of your EverSubs installation. When you uninstall EverSubs from your Shopify store, Shopify notifies us and we mark the installation as terminated. After uninstall, we retain data only as long as necessary for contract settlement, statutory retention, or the defense of legal claims, then delete or anonymize it.
Operational logs that are needed for security and troubleshooting are generally kept for a limited period and then rotated or aggregated. Exact periods depend on the data type and legal requirements.
We use access controls, encryption in transit, hardened cloud infrastructure, and monitoring to protect the data entrusted to us.
Under the GDPR, you have the right to access (Art. 15), rectify (Art. 16), erase (Art. 17), restrict processing (Art. 18), data portability (Art. 20), and object to processing based on legitimate interests (Art. 21). If processing is based on your consent, you may withdraw it at any time with effect for the future.
You may lodge a complaint with a supervisory authority of your habitual residence, place of work, or the place of the alleged infringement.
For subscriber data where you are the controller, please submit requests to the merchant store you purchased from. We will support the merchant in fulfilling those requests as their processor.
To exercise your rights or object to processing based on legitimate interests, contact us at privacy@eversubs.app or write to Tomorrowfy GmbH, Ungererstr. 129, 80805 Munich, Germany (keyword: Data Protection). Please include your store domain and describe your request so we can process it promptly.
We use essential cookies to operate our website and the app. Where permitted, we use privacy-friendly analytics to understand usage and improve the service. These tools process pseudonymized or aggregated data and are not used to build individual profiles or for advertising. We do not use cookies for advertising or cross-site tracking.
Our competent data protection authority is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht).
EverSubs is intended for use by businesses and is not directed at children under 18. We do not knowingly collect personal data from children.
We may update this Privacy Policy to reflect changes to our practices or for other operational, legal, or regulatory reasons. When we make material updates, we will notify you through the app or by email before the changes take effect.
For questions or requests related to this Privacy Policy, email us at privacy@eversubs.app.