Hurrik Reports Hub
Merchant data-processing terms
Version hurrik-dpa-2026-10-20-v1 · 20 October 2026
Operator: Manjit Kumar / Hurrik. Read these terms with our privacy notice. Contact phpdeveloper.manjitkumar@gmail.com about processing instructions or provider/location information.
1. Roles and instructions
The merchant controls its Shopify store data and decides the lawful purposes, report fields, recipients and connected destinations. Hurrik processes that data to provide the reporting services selected by the merchant and to follow documented merchant instructions, subject to applicable law. Hurrik does not independently sell customer information or use report contents for advertising or unrelated profiling.
2. Scope
Processing covers store authentication, report configuration and generation, approved schedules, delivery, resource synchronization, snapshot sharing and privacy-request assistance. The selected Shopify records may include orders, refunds, returns, payment/payout entries, products/inventory, customer-summary identifiers and merchant-selected metafields. Fixed customer contact columns are not requested. Selected custom data may still contain personal information.
3. Confidentiality and security
Access is restricted to authorized operation and support. The app binds operations to the store, encrypts the protected fields and exports described in the privacy notice, uses verified secure transport and protects recovery keys separately. The notice distinguishes protected payloads from operational metadata, logs and historical-copy limits; these terms do not promise complete disk encryption or perfect security.
4. Other processors and destinations
BigRock hosts the reporting service. The configured Google/Gmail account provides email transport; optional Google Drive/Sheets, Slack and merchant-supplied SFTP/FTPS destinations receive files only when the merchant configures them. The operator must maintain a current provider/location register and explain changes and applicable international-transfer arrangements before relying on these terms. A merchant-selected destination retains copies under that destination’s controls.
5. Privacy assistance and incidents
Hurrik assists the merchant with requests concerning retained app data, Shopify privacy webhooks, and relevant security incidents. The operator must notify the affected merchant without undue delay after confirming an incident affecting the merchant’s personal data and provide available information and reasonable cooperation. No previously agreed notification deadline or legal certification is asserted.
6. Retention, return and deletion
Current defaults are 30 days for completed export/source payloads and 90 days for terminal operational history and cache, subject to active work, privacy holds, bounded cleanup and the privacy notice’s limits. Merchants can download supported reports while accessible. Uninstall disables access and work; subsequent Shopify store erasure removes active retained app data. Recovery journals prevent deleted data from silently returning after rollback. Previously downloaded/provider copies and historical server logs/backups require separate handling.
7. Information and review
The operator will provide reasonable information about these safeguards and processing on a verified merchant request. Requests must not expose another merchant’s information, credentials or unrelated systems. No security audit certification is claimed.
8. Merchant responsibilities
The merchant must have authority and a lawful basis for selected data and recipients, provide any required customer notices/choices, avoid unnecessary personal fields, and honor requests concerning files retained outside Hurrik.
Acceptance and records
Acceptance is requested inside the authenticated Shopify app. We record the store, this version and the time of acceptance; we do not treat installation or reading this page as acceptance. A changed version requires a new acknowledgment. Uninstall clears the installation’s acceptance record. Customer-data erasure does not withdraw the merchant’s agreement; store erasure removes the remaining installation record.
These terms describe the service’s processing arrangements. They do not replace additional mandatory clauses applicable to a particular jurisdiction or merchant contract. Contact support before using the service if additional arrangements are required.