Terms

Version 2026-09-26, in effect 26 September 2026

These terms are the agreement between you, the merchant who installs JourneyLens on a Shopify store, and the developer who operates it, contactable at journeylensapp@gmail.com. Part B is a data processing agreement and applies to the storefront visitor data JourneyLens handles on your behalf.

You accept them inside the app before it will show you anything. If you do not accept them, uninstall JourneyLens.

Part A — Using JourneyLens

1. What the service does

JourneyLens records what visitors do on your storefront and reports it back to you: where each visit stopped, which checkout errors visitors hit, which products were abandoned, and an optional review written by a language model. It is a reporting tool. It does not contact your visitors, change your storefront, or alter your orders. Once a week it emails the store owner a summary, which you can turn off in the app or from the link in any summary.

2. Your account

JourneyLens is installed and removed through Shopify. Your access lasts as long as the app is installed and your subscription is active. You are responsible for who in your organisation you give Shopify admin access to.

3. Payment

JourneyLens is billed through Shopify at the price shown on its App Store listing. Shopify collects the payment on its own invoice and we never see or handle your card details. Charges, refunds, proration and cancellation follow Shopify’s billing terms. You can change or cancel your plan at any time from inside the app or from your Shopify admin, without contacting us.

4. What you are responsible for

You are the controller of your visitors’ data and we are your processor. That means some things remain yours:

  • Telling your visitors, in your own storefront privacy notice, that their on-site behaviour is recorded.
  • Running a consent mechanism where the law requires one. JourneyLens declares a single purpose, analytics, and Shopify only loads it for visitors whose consent covers that purpose — but the banner and the consent record are yours.
  • Having a lawful basis for the processing you are asking us to carry out.
  • Not using JourneyLens to attempt to identify an individual visitor, and not combining what it shows you with other data in order to do so.

5. What we will not do

We will not sell or share your data or your visitors’ data. We will not use it for advertising. We will not compare your store against another merchant’s, and we will never show one merchant anything belonging to another. We will not use any of it to train or fine-tune a machine learning model, ours or anyone else’s.

6. Availability

We aim to keep JourneyLens running and will not deliberately break it, but it is provided as it is, without a guaranteed level of uptime. Recording depends on Shopify’s web pixel and on your visitors’ browsers, neither of which we control, so gaps in the record are possible and JourneyLens says when it has not heard from your store rather than pretending the quiet is real.

7. Limits of liability

JourneyLens reports what it observed and, in the review, offers an opinion. Deciding what to change in your store remains your judgement, and we are not liable for the commercial results of decisions you make after reading it. To the extent the law allows, our total liability to you is limited to the fees you paid us in the twelve months before the claim.

Nothing here limits liability that cannot lawfully be limited.

8. Ending the agreement

Uninstall JourneyLens from your Shopify admin whenever you like. On uninstall, every event, visit summary and store review for your shop is deleted immediately, and Shopify sends a shop redaction request 48 hours later which we act on again as a backstop. We may end this agreement if the app is used to break these terms or the law.

9. Changes

If these terms change materially, the version number above changes and you will be asked to accept the new version inside the app before continuing. Minor corrections that do not change your rights or ours will not interrupt you.

Part B — Data processing agreement

This part applies where you are subject to the UK GDPR, the EU GDPR, or a comparable data protection law. It forms the contract those laws require between a controller and its processor.

B1. Roles

For storefront visitor data, you are the controller and JourneyLens is the processor. You decide that visits are recorded and for what purpose; we hold the data only to show it back to you.

For your own account, session, billing and support data, we are the controller. That is covered by the privacy page rather than by this part.

B2. Subject matter, duration, nature and purpose

  • Subject matter: behaviour of visitors to your Shopify storefront.
  • Duration: for as long as JourneyLens is installed, subject to the retention periods in B6.
  • Nature and purpose: recording, reconstructing and reporting visits so you can see where visitors stop and why.

B3. Categories of data subject

Visitors to your storefront, including those who buy and those who do not.

B4. Types of personal data

What we process:

  • A visitor identifier supplied by Shopify, which distinguishes one browser from another and cannot be resolved to a person by us.
  • Event names and timestamps, and the page address each happened on, with query strings and private checkout tokens removed.
  • Product titles, handles and prices, cart contents, checkout totals and currency, and the text of any error the checkout displayed.
  • How a visit arrived and on what: the host name of the referring website, the utm_source, utm_medium and utm_campaign campaign tags, which ad network’s click id was present (not its value), whether the device is a phone, tablet or computer, and whether the browser declared itself automated.
  • The shipping cost and item subtotal shown in checkout.
  • The order id of a completed checkout. This is the only value we hold that you can trace back to a named customer, using your own Shopify admin, and it is kept so that an erasure request has something to match on.

JourneyLens excludes customer contact and address fields, customer ids and marketing consent flags from stored events. It retains only fields needed for reports and order ids needed to fulfill erasure requests. Raw search input and custom line properties are excluded.

B5. Our obligations

  • We process the data only to provide JourneyLens to you, and only on your instructions. Installing the app and using its features is your instruction; there is no other way for us to be told to do something with it.
  • Everyone with access is bound by confidentiality.
  • We keep the security measures described in B7 and will not weaken them.
  • We assist you in responding to visitors exercising their rights. Shopify passes those requests to us automatically and we act on them as described in B8.
  • We assist you with breach notification, data protection impact assessments and prior consultation, so far as the information is ours to give.
  • On uninstall we delete the data rather than keeping it. If you need a copy before you uninstall, ask us first.
  • We make available the information needed to show these obligations are met, and will answer reasonable audit questions in writing.

B6. Retention

  • Visitor events and the visit summaries built from them: deleted automatically 90 days after they happened.
  • Store reviews, session records and the note that a data request arrived: kept until you uninstall.

B7. Security

Data is encrypted in transit with TLS and at rest with AES-256. Each store’s data is separated by its shop domain and only ever served to that store’s authenticated Shopify admin session. Access tokens are held server-side and never exposed to a browser. If we suffer a breach affecting your data we will notify you and Shopify without undue delay.

B8. Requests from visitors

  • A request for data: we record it and, within the 30 days Shopify allows, send you every visit record belonging to the visitor behind the orders named, for you to pass on.
  • A request for erasure: we identify the visitor behind the orders named and delete their whole recorded journey, not only the events carrying an order number.
  • A shop redaction request: we delete everything for your store.

B9. Subprocessors

You authorise the following, and we will tell you before adding another so you have the chance to object:

  • Railway — hosting for the application.
  • Supabase — the database, in the Asia Pacific (Seoul) region.
  • Anthropic PBC (United States) — the store review only: when you press the button, and once a week for the weekly summary unless you turn that off. It receives counts, your store settings and the text of the products visitors abandoned. It receives no visitor identifier and nothing about your orders or customers.

B10. International transfers

Where data moves between countries it does so under the standard contractual clauses our providers offer.

B11. Conflicts

Where Part B conflicts with Part A about personal data, Part B wins.