CoreX Connect / Shopify processing schedule
Versioned data-protection terms and processing disclosures for CoreX services and white-label deployments.
CoreX Connect / Shopify schedule
Version: COREX-CONNECT-SHOPIFY-SCHEDULE-2026-09-22-V1
This product schedule is intentionally narrower than historical Fennorica/DARE DPAs. It does not inherit their broad participant/contact data categories.
Permitted Level-1 data: shop and installation identifiers; order IDs/references/timestamps; product/variant/SKU references; payment/financial/refund status and non-card transaction references; fulfilment/tracking state; entitlement/configuration references; minimal proof/trust lifecycle references; bounded webhook/compliance references; encrypted OAuth token material.
Excluded: customer Name, Address, Email, Phone, payment-card/account credentials, special-category data and criminal-offence data.
Any move to Level 2 or broader Shopify scopes requires a new schedule, new technical review and new Shopify protected-customer-data review.