Privacy Policy

This policy explains what data Dotshop (“the app”), operated by Kay Mohnke trading as Dotworks (“we”), processes when a BigCommerce merchant installs the app and when shoppers view a look on a merchant’s storefront.

1. Data we process for merchants

• Store data: your BigCommerce store hash, store name, storefront URL, currency and the API access token BigCommerce issues to the app. The token lets the app read your product catalog, inject the storefront script and create coupon codes you configure.
• User data: the email address and BigCommerce user id of every user who opens the app, so we can show the app to authorised users only.
• Content you create: looks, images you upload, hotspot positions, product and variant references, design settings and discount settings.
• Product snapshots: a cached copy of the products you link (name, price, images, options), refreshed through BigCommerce webhooks so storefront pages load quickly.

2. Data we process for shoppers

The storefront widget loads look data from our servers. In doing so our hosting provider receives the shopper’s IP address and browser information in ordinary server logs. The widget sets no cookies and no tracking identifiers. When a merchant is on a plan with analytics, the widget sends anonymous events (look viewed, dot opened, item added to cart) that contain the look id and product id only. Adding items to the cart and applying coupons happens directly between the shopper’s browser and the merchant’s BigCommerce store.

3. Where data is stored

• Application hosting: Vercel Inc., region Frankfurt (EU).
• Database: Turso (Turso Inc.), EU region.
• Uploaded images: Vercel Blob storage. Images are publicly readable at an unguessable URL because storefront visitors must be able to load them.
• Payments (paid plans): Stripe Payments Europe Ltd. We never see your card details.

4. Legal basis and retention

We process merchant data to perform the contract with you (Art. 6(1)(b) GDPR) and shopper log data on the basis of our legitimate interest in operating a secure service (Art. 6(1)(f) GDPR). When you uninstall the app, BigCommerce notifies us and we delete your store record, users, looks, product snapshots and analytics events. Uploaded images are deleted within 30 days. Server logs are kept for a maximum of 30 days.

5. Your rights

You can request access to, correction or deletion of your data, and you can object to processing based on legitimate interest, by emailing support@dotworks.app. You also have the right to lodge a complaint with a data protection authority.

6. Contact

Kay Mohnke, Dotworks, [Street and number], [Postcode] [City], Germany, support@dotworks.app