Terms of Service

Delink is a product of Dhavira LLC. These Terms govern your use of the Delink hosted service (the "Service"). By creating an account or using the Service, you agree to these Terms and represent that you are acting for a business, are at least 18 years old, and have authority to bind that business. The Service is not offered for personal, family, or household use. At this time, the Service is offered only to businesses based in United States, Canada (outside Quebec), Australia, Singapore, New Zealand, Israel, and India. This list reflects our current operating intent and may change before general availability or after counsel review. Businesses based in Quebec, the European Economic Area, the United Kingdom, or Switzerland may not subscribe at this time. Delink has not completed counsel review or the launch requirements for those jurisdictions.

Delink helps Shopify app developers receive the three mandatory compliance webhook topics (customers/data_request, customers/redact, shop/redact), verify HMAC signatures, track 30-day workflow clocks, maintain an application event log, and export compliance event records.

Optional Forward forwards verified compliance webhooks to an HTTPS URL you configure. We send the same request Shopify delivered to us and do not keep the raw webhook body after processing.

Delink does not fulfill data subject requests in your application, certify regulatory compliance, or store long-term copies of Shopify customer payloads. You remain responsible for exporting, restricting, or deleting customer data in your own systems.

Delink creates records only for requests that reach the Service and are successfully verified and persisted. Network, infrastructure, authentication, or storage failures can prevent a record. Event status, audit entries, dashboards, and exports do not establish that Shopify sent every relevant request or that deletion occurred in your systems.

Delink minimizes data at rest. We do not persist customer contact information (names, email addresses, phone numbers, mailing addresses, or order line items) or raw webhook JSON bodies from Shopify compliance payloads — bodies are verified and parsed for the listed metadata in memory only. We do store operational metadata to track each request: shop domain, topic, timestamps, opaque Shopify resource IDs (such as shop_id and customer.id when present), and optionally a salted one-way hash derived from a customer email or shop identifier — not the email itself or the source shop identifier. Retention and GDPR considerations are in our Privacy Policy.

You agree to:

• configure Shopify correctly (compliance_topics, valid client secret, Delink webhook URL);
• honor compliance webhooks in your own application and data stores within applicable legal and Shopify timeframes;
• maintain accurate privacy disclosures that describe how you and Delink handle data; and
• use Delink lawfully and in compliance with Shopify's terms.

You are responsible for your account, authorized users, Shopify credentials, configuration, notices and consents, and the legality and accuracy of your instructions. Do not submit data that the Service is not designed to receive, including special-category or sensitive personal data beyond fields Shopify includes in mandatory compliance webhooks.

In typical use, the merchant is the data controller, you (the app developer) are a processor or sub-processor, and Delink is your subprocessor for compliance webhook ingest and logging. Our Data Processing Agreement applies when you accept it at subscription checkout.

You must provide accurate account information and promptly notify us of suspected unauthorized access. You may not interfere with the Service; probe or bypass security or usage limits; upload malicious code; misuse another tenant's data; reverse engineer except where law makes that restriction unenforceable; resell the Service without written permission; use it to violate law or third-party rights; or use multiple accounts to evade plan, trial, or retention limits.

We may investigate suspected abuse and suspend affected access when reasonably necessary to protect the Service, customers, or third parties. We will give notice when practicable.

As between the parties, you retain rights in data and configuration you provide. You instruct and grant us a limited right to process Customer Personal Data solely to provide, secure, and support the Service on your documented instructions and as permitted by the DPA. We may improve the Service using Delink Controller Data and data that has been aggregated or de-identified so it is not reasonably linkable to an individual or customer.

Each party will protect the other's non-public confidential information using at least reasonable care and use it only for this relationship. Confidential information does not include information lawfully known without restriction, independently developed, rightfully received from another source, or made public without breach. A legally compelled recipient may disclose only what is required and, where permitted, will give prompt notice. On request or termination, each party will return or destroy confidential information except for legally required records and protected routine backups.

Delink and its licensors retain all rights in the Service, software, documentation, and branding. Subject to these Terms, we grant you a limited, non-exclusive, non-transferable, non-sublicensable right to use the Service during your subscription for internal business purposes. That right may be suspended or terminated only as these Terms allow. If you provide feedback, you permit us to use it without restriction or payment, without identifying you publicly.

We strive for reliable webhook ingest and console access but do not guarantee uninterrupted service. We may modify or discontinue features. We will not materially reduce a paid feature during its current billing period without reasonable notice, except for security, legal, or third-party platform reasons. Material Terms changes will be posted with a new effective date and communicated directly by email or in-product notice before taking effect, except urgent legal or security changes may take effect sooner. We will request affirmative reacceptance when a change materially affects liability, dispute terms, data processing, renewal, or other rights for which continued use is not sufficient. Other changes apply prospectively on the stated effective date.

Delink offers a 7-day free trial with full console access and no payment method required. After the trial, a paid subscription is required to continue. Solo and Multi plans bill monthly in U.S. dollars through Stripe until you cancel via the Stripe customer portal.

Prices exclude applicable taxes. You authorize Stripe and us to charge the payment method on file for recurring fees, taxes, and approved plan changes. Stripe may process payment information under its own terms and privacy notice. You are responsible for taxes other than taxes on our net income.

Cancellation. Cancellation stops future renewals. You retain console access through the end of your current paid period unless suspended for non-payment or cause.

Refunds. Fees are generally non-refundable, including partial months and mid-cycle cancellations, except where required by law. Billing disputes: contact support@getdelink.com within 14 days of the charge. Chargebacks without contacting us first may result in suspension while the dispute is investigated.

The Service interoperates with Shopify, Stripe, and other third-party services. Their availability, APIs, terms, and decisions are outside our control. You are responsible for maintaining required third-party accounts and permissions. Delink is not affiliated with or endorsed by Shopify unless expressly stated.

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE." TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT USE OF DELINK WILL MEET YOUR LEGAL OBLIGATIONS OR RESULT IN REGULATORY OR APP STORE APPROVAL.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, DELINK AND ITS OPERATORS WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR LOSS OF PROFITS, DATA, OR GOODWILL — INCLUDING COMPLIANCE FAILURES, APP STORE REJECTION, FINES, OR DATA SUBJECT CLAIMS — EVEN IF ADVISED OF THE POSSIBILITY. TO THE MAXIMUM EXTENT PERMITTED BY LAW, OUR TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THE SERVICE OR AGREEMENT IS LIMITED TO THE GREATER OF (A) FEES YOU PAID DELINK DURING THE TWELVE (12) MONTHS BEFORE THE FIRST EVENT GIVING RISE TO THE CLAIMS OR (B) US$100. THESE EXCLUSIONS AND LIMITS DO NOT APPLY TO FRAUD, WILLFUL MISCONDUCT, GROSS NEGLIGENCE, INDEMNIFICATION OBLIGATIONS, OR LIABILITY THAT CANNOT LAWFULLY BE LIMITED. LIABILITY FOR BREACH OF CONFIDENTIALITY OR DATA-SECURITY OBLIGATIONS IS LIMITED TO THREE TIMES THE ORDINARY AGGREGATE CAP. THESE LIMITS DO NOT RESTRICT THE RIGHTS OF REGULATORS OR PEOPLE WHO ARE NOT PARTIES TO THIS AGREEMENT.

To the extent permitted by law, you will defend and indemnify Dhavira LLC, its affiliates, and personnel against third-party claims, damages, and reasonable costs to the extent caused by your unlawful use of the Service, your application or data practices, your material breach of these Terms, or your infringement of third-party rights. This does not apply to the extent a claim is caused by Delink's breach, gross negligence, or willful misconduct. We will promptly notify you, reasonably cooperate at your expense, and allow you to control the defense with qualified counsel. You may not settle a claim in a way that admits our fault, imposes obligations on us, or fails to fully release us without our reasonable written consent.

You may stop using Delink at any time. We may suspend or terminate access for violation of these Terms, non-payment, abuse, or legal requirement.

During early access, the following retention schedule applies to production compliance events received through the Service. Compliance events remain visible through 90 days after the workflow due date on all plans, then are hidden and queued for deletion by the weekly retention job. Actual deletion can occur on the next successful job run. If your subscription ends, console access is blocked and event data is scheduled for deletion after a 30-day resubscription period. Account, billing, consent, security, backups, legal holds, and support records follow the Privacy Policy.

These Terms are governed by the laws of North Carolina, without regard to conflict-of-law rules. Subject to mandatory law, claims must be brought in the state courts located in Cabarrus County, North Carolina, or the federal courts for the Middle District of North Carolina, and each party consents to those courts. Before filing a claim, each party will give written notice and make a good-faith effort for 30 days to resolve the dispute. This section does not prevent either party from seeking urgent injunctive relief or using an eligible small-claims court. Mandatory rights and venues that cannot lawfully be waived remain unaffected.

Neither party is liable for delay caused by events beyond its reasonable control, except payment obligations. You may not assign these Terms without our written consent; we may assign them in connection with a merger, reorganization, or sale of substantially all relevant assets. If a provision is unenforceable, it will be limited to the minimum extent necessary and the remainder stays effective. A waiver must be in writing and is not a continuing waiver.

These Terms, the DPA, the Privacy Policy, and any checkout order form are the entire agreement about the Service and supersede prior proposals on that subject. The DPA controls for conflicts concerning processing of Customer Personal Data; an order form controls for its commercial terms. Sections that by nature should survive termination—including fees, confidentiality, intellectual property, disclaimers, liability, indemnity, disputes, and general terms—survive.

Questions or legal notices: support@getdelink.com.