Savepoint — backup & restore for Shopify

Data Processing Agreement

Effective October 15, 2026

This agreement is between you, the merchant who installs Savepoint ("you"), and Anchor Apps, which operates Savepoint ("we", "us"). It is part of our Terms of Service, and you accept it by installing or using the app. It covers the personal data of your customers and store visitors that Savepoint handles for you. Where the GDPR, UK GDPR or a similar law applies, you are the controller of that data and we are your processor.

1. What we process and why

  • Purpose. To back up, verify, export and restore your store's data, and for nothing else. We do not sell this data, use it for advertising, analyse it for our own purposes, or combine it with data from other stores.
  • Data. Order records, once order backup is on for your store: order numbers and IDs, line items, prices, discounts, taxes, shipping method and cost, payment and fulfilment status, dates, tags, notes and custom attributes. Notes and custom attributes are stored as written, so they hold whatever was typed into them.
  • Not processed. The customer who placed the order, including their Shopify ID, and customer names, email addresses, phone numbers and postal addresses. We do not request any of them from Shopify, and Shopify withholds the names and contact details from our access level. We never receive payment card details.
  • Whose data. Your customers, and visitors whose activity appears on an order.
  • How long. For as long as you use the app, within the backup retention window your plan and settings set. Older backups are deleted automatically. The latest copy of an order is kept for as long as the order exists in your store. Older copies follow the window. An order you delete goes after the window, once we have confirmed it is gone from your store.

2. Your instructions

We process this data only to provide the app as you configure it. Your settings in the app, your restores and exports, and these terms are your instructions. If we are ever legally required to process it any other way, we will tell you first unless the law forbids it.

3. Security

  • Every backup is encrypted before it is stored (AES-256-GCM) with a key unique to your store. Data travels over TLS.
  • Backups are kept with two independent storage providers, and every backup is verified after it is written.
  • Access to production systems is limited to the people who operate Savepoint, and anyone with access is bound by confidentiality.

4. Subprocessors

You authorise us to use these providers. Each is bound by its own data processing terms, and where data leaves the EU or UK, by the European Commission's Standard Contractual Clauses.

  • Hetzner Online GmbH: app servers and database, Finland.
  • Backblaze, Inc.: primary backup storage, United States.
  • Cloudflare, Inc.: second backup copy and network.

We will announce any new subprocessor for your customers' data inside the app at least 14 days before it starts processing. If you object, you can uninstall, and your data is deleted as described below. The providers that deliver our email (Plunk, on Amazon Web Services) and host our support mailbox (Microsoft) handle your contact details and messages, never your customers' data.

5. Your customers' rights

  • When a customer asks you for their data, Shopify sends us the request, naming their orders. We send you the data we hold for those orders within 30 days.
  • When a customer asks to be erased, Shopify sends us the request, naming their orders. We delete those orders from our systems and from both storage providers, backups included, within 30 days, and do not back them up again while your store uses Savepoint.
  • We will help with any other request or data protection assessment you need, as far as the information we hold allows.

6. Breaches

If we become aware of a breach affecting your customers' data, we will notify you without undue delay and within 72 hours, by email to your store's contact address. We will tell you what happened, what data was involved, and what we are doing about it, and keep you updated as we learn more.

7. When you uninstall

Shopify sends us a deletion request about 48 hours after you uninstall. All of your store's data, including every backup at both storage providers, is then permanently deleted. If you want a copy, export it from the app's Download page before you uninstall.

8. Audits

We will answer reasonable written questions about how we meet this agreement, and give you the information you need to show your own compliance. Write to [email protected].

9. Everything else

The Terms of Service govern anything this agreement does not, including liability. Where the two conflict on personal data, this agreement wins.