---
title: Actorly privacy policy: what we collect and why
description: What Actorly collects when you install it, why it is used, who handles it, how long it is kept, and how to have it deleted or use your rights.
canonical: https://admin.actorly.app/privacy
---

Legal

# Privacy policy.

What Actorly collects when you install it, where it comes from, why it is used, who handles it, how long it is kept, and how to have it deleted or to use your rights.

ONDUTYOPS LLC[team@actorly.app](mailto:team@actorly.app) Effective 2026-10-13

Effective 2026-10-13. This policy replaces any earlier version.

Updated 2026-10-15 to add the copies of images and theme files that Actorly keeps for stores on the Restore plan, and the account status details the app sends to the chat when you open it. On 2026-10-15 the Meta wording was extended to cover article reads, help center searches and chat opens.

Updated 2026-10-15 to add the privacy center and the section Your privacy choices and requests.

Updated 2026-10-16 to add GitHub, Inc. as a sixth subprocessor, and to say that we copy install, uninstall and subscription records from Shopify's Partner API, why, on what basis, and how long we keep them.

Updated 2026-10-16 to say how a request in the privacy center is confirmed by email, how to appeal a decision under a US state law that gives that right, and to add a section on rights in Brazil, Canada, Australia, Japan, South Korea, India and Switzerland.

Updated 2026-10-17 to say that a Global Privacy Control signal keeps Google Analytics, Cloudflare Web Analytics and Marketing off, that we keep the record of a cookie choice for 24 months, that requests from the European Union, the United Kingdom and Switzerland go to our team address, and who to contact in Brazil, Quebec, India and South Korea.

Updated 2026-10-16 to name Anthropic, PBC, which sorts a support chat by help topic from a redacted copy of what the visitor typed, and to say which AI models write and translate our own public content.

Updated 2026-10-19 to add the cookie that keeps your chats and tickets together when you write to us in the chat, and the counters that limit abuse of the chat.

### Contents 33 sections

## 1 Who we are, and who this policy covers

1.1 Actorly is made by ONDUTYOPS LLC, a Delaware limited liability company with its registered address at Coastal Highway, Lewes, Delaware 19958, United States. This policy explains how Actorly handles personal data. Questions, requests and complaints go to team@actorly.app, where the company's privacy contact reads them.

1.2 This policy covers three groups of people. Merchants, meaning the people and businesses that install Actorly in a Shopify store. Customers of those stores, whose personal details appear in a change Actorly records. And visitors to the Actorly website at actorly.app.

1.3 It does not cover Shopify, Cloudflare or any other company's own handling of data. Their policies apply to what they do.

Back to contents

## 2 Two roles: controller and processor

2.1 For the personal data of merchants, such as the store owner's name and email address, Actorly decides why and how it is used. In privacy-law terms we are the controller of that data.

2.2 For the personal data of a store's customers, the merchant decides why it is used, and Actorly holds and handles it on the merchant's behalf to run the service for that store. In privacy-law terms the merchant is the controller and we are the processor. The data processing agreement sets out that relationship.

2.3 A customer who wants to use a right over data held in a store should contact the store first. We help the merchant answer, and Shopify's own privacy requests, described in section 16, are how most requests reach us.

Back to contents

## 3 What we collect from merchants

3.1 When you install Actorly, and while you use it, Shopify gives us the following information about your store and about you, and we keep it to run the app and to contact you about it.

- The shop domain and shop name.
- Shopify's plan name for the store, its time zone and its currency.
- The store owner's name and email address, and the store's contact email. We use them for your account, to contact you about the app and your store, and to answer your support requests.
- The permissions you granted, and the install state and dates.
- Records of installs, uninstalls and subscription charges, copied from Shopify's Partner API: the shop domain and name, the event and its date, and the plan name, amount and whether it is a test charge.
- The Actorly plan and the billing interval (the plan handle only; Shopify takes the payment).
- The display name Shopify gives for the staff member or app that a change was matched to. Shopify gives a name only, never a staff identifier.
- A webhook address you choose for alerts, and its signing secret, which is kept encrypted with AES-256-GCM under a key held only as a secret of the Worker that runs the service.
- Messages you send to team@actorly.app, and our replies.
- When you open the chat in the app: the store's name and myshopify.com domain, the owner's name, the store's contact email and the owner's account email, the Shopify plan, the currency, the Actorly plan with its billing interval and status, the app version, the language, the install date and the in-app page you are on, and a short status of your account and of how Actorly is working for your store: whether the history import is complete, still running, failed or has gaps, the date of the last recorded change, how many changes were recorded in the last 30 days and how many could not be recorded, how many restores you have used and have left, the outcome, date and reference number of the last restore, the status of the latest theme backup and when it was made, whether Actorly is missing an access it needs, whether a customer data request is open, and the number of days since install, with a few short labels made from these (for example importing or access needed). These are counts, dates, set words and yes or no values only: no product, page or theme content, and nothing about your customers or orders. All of this goes to Crisp IM SAS (see the subprocessor list). The store's contact email, or the owner's account email when there is no contact email, is sent signed with Crisp's identity verification. Nothing is sent to Crisp until you choose to open the chat. What you type in the chat goes to Crisp too. A redacted copy of what you type also goes to Anthropic, PBC, to sort the chat by help topic for our support team, as the section on subprocessors says.

3.2 The website at actorly.app has no account and no contact form. It shows the email address above, and what you send us there is kept as support correspondence.

Back to contents

## 4 What we collect from your store: the change history and, on Restore, copies of images and theme files

4.1 Actorly records the fields it tracks, listed on the coverage page, and their old and new values when they change, with the time of the change and, when Shopify reports who made it, that name or app name.

4.2 Most of this is business information such as product titles, prices and settings. Some of it is personal data about your customers. Actorly stores some personal details about your customers when they appear in a change it records, as the next section lists.

4.3 Actorly does not read a customer's account email address or account phone number, payment details, card numbers, tracking numbers, or browsing or storefront behaviour. It does not read other apps' own data: it records the changes Shopify reports in your store. It adds no script, pixel or tracking code to your storefront and shoppers load nothing from Actorly.

4.4 What Actorly asks Shopify for. Actorly asks for 25 permissions, none optional. It has read access to: inventory levels; discounts; online store content (blogs, articles and pages); navigation menus and URL redirects; themes; store policies (refund, privacy, terms and shipping policies); store languages; sales channel publications; orders; draft orders; customers; and fulfillments. It has read and edit access to: products, variants and collections; files; locations; markets; and shipping and delivery settings. The security page lists each permission and why it is asked for.

4.5 Copies on the Restore plan. On Actorly Restore, and only there, Actorly also keeps copies of files so that they can be restored or downloaded: the featured image of each product, the image of each collection, the images in your Shopify Files library, and the files of your themes. Actorly gets each image from the public Shopify address Shopify gives for it. For Files it copies only images of the types JPEG, PNG, GIF, WebP and AVIF. It never copies a document, a video or any other kind of file from Files. For themes, it reads the files of your published theme and of your unpublished themes from Shopify, keeps a copy of each file when it changes, and lets you download a theme as a ZIP archive that you can upload to Shopify yourself. Actorly never writes to a theme. A theme file can contain whatever the theme's author put in it, including your own text and settings.

4.6 These copies are stored in Cloudflare R2, under a prefix that holds only your store's files, and only your store can read or download them. On the Watch plan Actorly still records that an image or a theme file changed, but it keeps no copy and offers no download. We keep the copies only so that you can see what a file was and get it back, and we use them for nothing else.

Back to contents

## 5 What we process on behalf of merchants: customer data

5.1 Shopify has approved Actorly for all four protected customer-data fields, so we say what we hold. These are the personal details Actorly stores about a store's customers, and where they come from.

Kind of recordPersonal details stored

CustomersFirst and last name (or, for a customer with no name, the email address Shopify uses as the name); the customer note; tags; whether the customer agreed to email and text marketing (the state, not the address it applies to); and the default address: name, address lines, city, region, country, postcode and phone.

OrdersThe order note, which is free text and may contain anything; the shipping address and the billing address on the order: name, lines, city, region, country, postcode and phone. The order's status, totals and tags are not personal.

Draft ordersThe draft order note.

FulfillmentsStatus, quantity, the carrier's name and the order number. The tracking number and the delivery address are not stored.

Staff and appsThe display name Shopify gives for the staff member or app a change was matched to.

5.2 These values are stored inside the store's own change history. Order notes and addresses are hidden from the merchant's screens and shown as redacted in exports, with the fact and time of the change kept. Customer values are visible to the store owner on their own screens.

5.3 Before Actorly saves its evidence copy of a notification from Shopify, it strips a list of personal keys at every depth, including customer, email, phone, billing and shipping address, notes and tokens. This is a list of named keys and not a guarantee that no personal value remains in any saved copy. Actorly never reads the notice's body to decide what changed. It asks Shopify again for the record, and the personal values above come from that second read.

5.4 We do not use customer data to contact customers or for marketing.

Back to contents

## 6 Payment data: we never see it

6.1 Billing is done by Shopify. Actorly does not take payment, has no billing screen, and does not receive your card number or other payment details. We know which plan a store is on and its billing interval, and nothing about how it pays.

6.2 Actorly does not process customers' payment details either. The service does not fetch them.

Back to contents

## 7 Where the data comes from

7.1 From you: when you install Actorly, approve its permissions, choose a plan, set an alert destination, confirm a restore, or write to us.

7.2 From Shopify: store details, the owner's details, the change notifications Shopify sends, the records Actorly asks Shopify to return, Shopify's activity log used to work out who made a change, and Shopify's privacy requests.

7.3 From the website: what our web host needs to deliver the pages and, only if you allow analytics in the cookie banner, the page views Google Analytics counts, and, only if you allow marketing, the page views, article reads, help center searches, chat opens and clicks the Meta Pixel and Meta's Conversions API report, as section 19 says.

7.4 From our own service: nothing about how you use Actorly is sent to a product analytics service today. If product analytics were switched on, it would be counts and durations only, and we would give notice first.

Back to contents

## 8 How we use the data

8.1 We use the data in this policy for the following purposes, and for no purpose that is not listed.

- To record your store's change history, show it to you, and let you search it.
- To work out who made a change, using fixed rules and not artificial intelligence, and to show how sure Actorly is.
- To run a restore that you confirmed, and to check the result with Shopify.
- To keep the service working, to find and fix faults, and to tell our own team when an install or an import needs attention.
- To apply your plan, including how long history is kept and how many restores you have.
- To count installs, uninstalls and paid subscriptions, and to see which plans stores are on, from the records Shopify's Partner API keeps about the Actorly app, so that we can run and report on the business.
- To answer you when you write to us, and to send service messages about your store.
- To sort a support chat by help topic and kind of question, so that our support team can see what people ask and which help articles are missing, by sending a redacted copy of what was typed to Anthropic, PBC.
- To protect the service and your store from abuse and security threats.
- To meet our legal duties and to establish, exercise or defend legal claims.
- To count visits to the website with Google Analytics, only if you allow it in the cookie banner.
- To measure our advertising on Meta with the Meta Pixel and Meta's Conversions API, only if you allow marketing in the cookie banner.
- To keep a record of the choice you make in the cookie banner, so that we can show what we asked and what you answered.
- To understand how the product is used, with counts and durations and no customer data and no store content, only if product analytics is ever switched on, which it is not today.

8.2 We do not sell data. We do not share it for advertising. We do not use it to profile your customers.

Back to contents

## 9 Legal bases for processing

9.1 Where the law asks us for a legal basis, we rely on these.

PurposeLegal basis

Running Actorly for your store, including recording and restoringPerformance of the contract with you

Customer data held for a storeProcessing on the merchant's instructions, as processor. The merchant's own legal basis is the merchant's to state.

Counting installs and subscriptionsOur legitimate interest in running and reporting on our business

Service messages and supportPerformance of the contract, and our legitimate interest in answering you

Sorting a support chat by help topicOur legitimate interest in answering you quickly and accurately, with the text redacted before it is sent

Security, fault finding and abuse preventionOur legitimate interest in keeping the service safe and working

Product event counts, if ever switched onOur legitimate interest in understanding use of the service. None are sent today.

Legal duties and claimsLegal obligation, and our legitimate interest in defending claims

The sign-in cookie for our own site editorsOur legitimate interest in letting our staff sign in securely. It is a strictly necessary cookie.

The cookie that keeps your chats and tickets togetherProviding the chat you asked for, and our legitimate interest in showing you only your own conversations. It is a strictly necessary cookie.

The cookie that remembers your cookie choice, and the record of that choiceOur legitimate interest, and our legal duty where it applies, in showing that we asked and what you answered. The cookie is strictly necessary.

Google Analytics on the websiteYour consent, given in the cookie banner. You can withdraw it at any time with Your Privacy Choices in the footer.

Meta Pixel and Conversions API on the websiteYour consent, given in the cookie banner under Marketing. You can withdraw it at any time with Your Privacy Choices in the footer.

Back to contents

## 10 Who we share data with, and why

10.1 We share data only as follows.

- With our subprocessors in section 11, who handle data for us to run Actorly.
- With Shopify, which is the platform Actorly runs in and the source of the data. We send Shopify what it needs to read and, during a restore, to write a field.
- With you: the history is yours, and your plan may let you export it.
- With an address you chose, when you set up a webhook alert. That address is yours, not our subprocessor.
- With authorities, advisers or courts where the law requires it or to defend a legal claim.
- In a sale, merger or reorganisation of the company, to the other party, who must keep to this policy or tell you first.

10.2 We do not sell personal data. If you allow marketing in the cookie banner, the website shares page views, article reads, help center search words, chat opens and clicks, your IP address and browser details with Meta to measure our advertising, which some US state laws call sharing for cross-context advertising. Reject all, Your Privacy Choices in the footer and a Global Privacy Control signal each stop it. We do not otherwise share personal data for cross-context advertising.

Back to contents

## 11 Subprocessors

11.1 Six companies handle data for Actorly itself. The list is the same in the data processing agreement and the security page. For this website only, Google also receives page views if a visitor allows analytics, and Meta also receives page views, article reads, help center searches, chat opens and clicks if a visitor allows marketing, as the last rows of the table say.

CompanyWhat it does for ActorlyWhat it receives

Cloudflare, Inc.Hosts Actorly and stores its data: the app itself, each store's change history, saved copies of what Shopify sent, copies of images and theme files kept for stores on Restore, and Actorly's account records.Everything described in the data table of the privacy policy.

PostHogCounts product events about Actorly itself, for example that a plan was chosen or a first import finished. Not in use today: used only if product analytics is switched on, with notice first.Nothing today. If switched on: the store's myshopify.com domain, the plan name, counts and durations. No customer data and no store content.

SlackDelivers operational notices to Actorly's own team workspace, so the team sees when an install or an import needs attention.The store's myshopify.com domain and a short status. No customer data and no store content.

Crisp IM SASLive chat with visitors and merchants who start a chat.What the person types, the page, browser details and, in the app, the store's name, myshopify.com domain, owner name, contact email and the owner's account email, Shopify plan, currency, Actorly plan with its billing interval, status, app version, language and install date, and app usage and account status details (the state of the history import, change and restore counts and dates, the last restore outcome, theme backup status, missing access, an open data request, days since install and labels made from these), never store content, customers or orders.

Anthropic, PBCSorts a support chat by help topic. Anthropic's Claude Haiku model reads the redacted words and answers with two labels from fixed lists, a help topic and a kind of question. The topic is added as a tag on the chat for our support team and counted, so that we can see which help articles are missing. The article suggested to the team in a private note is found by Actorly's own keyword matching, not by Anthropic. From Anthropic's answer Actorly keeps only the two labels, and no reply from Anthropic is shown to the visitor.The words a person typed in a support chat, after Actorly has taken out email addresses, phone numbers, web addresses (a bare domain only with the usual web endings), store domains, order numbers and Shopify ids, and the store name, owner name and contact details the chat's own session data holds. Only what the visitor typed, never our replies, and at most the first 1,500 characters. No store data, no customer data and nothing from the app.

GitHub, Inc.Runs the daily job that copies install, uninstall and subscription records from Shopify's Partner API into Actorly's own database, and builds and deploys the site.While the job runs: the shop domain and name, the event and its date, the plan name and amount. Nothing is kept by us on GitHub after the run; the job logs no store names.

Google Ireland Limited (Google Analytics 4), for this website onlyCounts page views on the website at actorly.app. Used only if a visitor allows analytics in the cookie banner.A browser identifier in a cookie, the page address and title, the referrer and technical details of the visit. Never store data or customer data.

Meta Platforms Ireland Limited and Meta Platforms, Inc. (Meta Pixel and Conversions API), for this website onlyMeasures our advertising on Meta, by telling Meta when a visitor views a page, reads an article, searches the help center, opens the chat, or clicks Install free on Shopify or a link to email us. Used only if a visitor allows marketing in the cookie banner. The Meta company that receives it is Meta Platforms Ireland Limited for visitors in the European Union and the European Economic Area, and Meta Platforms, Inc. for visitors elsewhere. It receives website visitors' data, never merchant data.From the Pixel in the visitor's browser: the full address of the page, including any query string, the page the visitor came from, the event (a page view; a view of a blog article, a help article or the pricing page, with the address name and topic of the article; that you read an article, meaning you scrolled through most of it and kept it open for about 30 seconds; a search in the help center, with the words you searched for, up to 80 characters; a press of the chat button; a click on Install free on Shopify, with the part of the page it was in; or a click on a link to email us), the _fbp and _fbc cookies and details of the browser. From our server's copy of the same event: the page address without its query string, the same event details, the visitor's IP address, browser user agent, the _fbp and _fbc cookies and an event id. The words you type into the help center search are sent to Meta, so please do not type personal details there. Nothing you type in the chat, and nothing you type into any other box, is sent to Meta. No store data and nothing from the app.

11.2 Shopify is the platform Actorly runs inside and the source of the data. It is not listed above as a subprocessor.

11.3 Anthropic, PBC receives support chats and nothing else that can hold personal data. When a visitor writes in a chat, Actorly removes email addresses, phone numbers, web addresses (a bare domain only with the usual web endings), store domains, order numbers, Shopify ids and the store name, owner name and contact details held in the chat's own session data, and sends the rest of what the visitor typed, up to its first 1,500 characters. Only what the visitor typed, never our replies, and at most the first 1,500 characters. No store data, no customer data and nothing from the app. The removal is automatic and cannot catch every personal detail a person writes in their own words, so please do not type personal details into the chat that you do not want us to have.

11.4 Anthropic's Commercial Terms of Service (anthropic.com/legal/commercial-terms) say: "Anthropic may not train models on Customer Content from Services." The redacted text is sent through Anthropic's API, which those terms cover. Anthropic keeps what it receives under its own terms and data processing addendum.

11.5 For each support chat that Actorly sorts, it keeps for 90 days, or until Crisp deletes the chat, the date, the help topic, the kind of question, the suggested article, a match score, the language, two yes or no flags, and keyed hashes of the chat and of the store domain. It also counts the topics by day, and keeps the counts after the 90 days. It keeps no message text.

11.6 We also use AI models to write and translate our own public content, and none of it is personal data. Our blog is drafted with Google's Gemini model on Google Cloud's Vertex AI, and with Anthropic's Claude Haiku model when Gemini is unavailable. Our help articles are translated with Anthropic's Claude Haiku model. What is sent is our own product notes, our own articles and public web pages. No visitor's, merchant's or customer's data is sent, and Anthropic's Commercial Terms, which bar it from training on what we send, apply to what it receives.

11.7 Actorly does not currently send product analytics to PostHog or to anyone else. PostHog is listed so that the list is complete if that changes: it would be used only if product analytics were switched on, and we would give notice before that happens. If it were switched on, an event would carry only the store's myshopify.com domain, the plan name and billing period, and counts or durations, from a fixed list of events. Anything else is dropped before it is sent.

11.8 When we add or replace a subprocessor, we update this list, the data processing agreement and the security page, and tell merchants in advance, in the app, through Shopify or by email to the store owner, before the new subprocessor starts to process data. A merchant with a reasonable data protection objection can write to us before the date in the notice. We will work with the merchant in good faith, which may include not routing its data to that subprocessor, or letting it end the affected part of the service without penalty.

Back to contents

## 12 International transfers

12.1 ONDUTYOPS LLC is based in the United States, and Actorly's data is stored and processed on Cloudflare's network, which is global. We do not restrict Actorly's data to a country or a region, so it may be handled in more than one country.

12.2 Where personal data from the European Economic Area, the United Kingdom or Switzerland is transferred to the United States or another country without an adequacy decision, we rely on the Standard Contractual Clauses, the UK Addendum and the Swiss changes set out in the data processing agreement. Our subprocessors rely on these safeguards.

SubprocessorTransfer mechanism

CloudflareEU Standard Contractual Clauses, incorporated into Cloudflare's own customer-facing addendum

PostHogNot in use today. If switched on: EU Standard Contractual Clauses (Module Two), and the UK Addendum for UK data, in PostHog's data processing addendum

SlackEU Standard Contractual Clauses in Slack's data processing addendum

Meta Platforms Ireland Limited and Meta Platforms, Inc. (website visitors who allow marketing, never merchant data)Meta's own terms for the Pixel and the Conversions API, which cover transfers of visitors' data to Meta Platforms, Inc. in the United States.

Crisp IM SASEU (Netherlands, Germany). Crisp's data processing agreement

Anthropic, PBCUnited States. Anthropic's data processing addendum, which its Commercial Terms incorporate, applies the EU Standard Contractual Clauses (Module Two or Three), the UK Addendum and the Swiss Addendum to transfers of personal data.

GitHub, Inc.United States. GitHub's data protection agreement incorporates the EU Standard Contractual Clauses (Module Two or Three for data it processes for us) and applies the UK Addendum to transfers of personal data.

12.3 You can ask for a copy of the safeguards by writing to team@actorly.app.

Back to contents

## 13 Data retention

13.1 These are the periods that apply.

WhatHow long

Change history on Watch90 days (about 3 months). Older rows are deleted by a rolling purge.

Change history on RestoreKept for as long as the store stays on Restore and Actorly stays installed.

Moving from Restore to WatchHistory older than 90 days is deleted after 14 days' notice, once and for all. Moving back to Restore does not bring it back. If the plan cannot be confirmed, nothing is deleted. Saved evidence copies are not purged on a downgrade in this version; they go when the store's data is erased.

Copies of images and theme files (Restore)Kept until the store's data is erased after an uninstall, as the Uninstall row says. The rolling 90-day purge and a move from Restore to Watch do not delete them in this version. After a move to Watch, Actorly stops making new copies and the download is refused, but the copies already made stay in storage until the store is erased.

UninstallShopify tells Actorly at once and sends a store-erasure request 48 hours later. Actorly then erases the store's change history, account records, stored evidence and copies of images and theme files, and checks that none is left. Reinstalling within the 48 hours keeps everything. A store that is installed is never erased.

A customer erasure request from ShopifyHandled automatically. Actorly removes that customer's personal values and the personal values on the orders the request names. Details on a draft order go when the store is erased. Afterwards Actorly keeps the customer's Shopify ID, the time of the erasure and the numbers of that customer's orders until the store's data is erased, so the details are not stored again.

Install and subscription recordsThe shop domain and name are removed within 72 hours after an uninstall. The event type, date, plan and an opaque Shopify shop id stay, with no way to tell which store they were.

Export filesDeleted 3 days after they are built.

Merchant account recordsUntil the store is erased after uninstall, unless the law requires a record to be kept longer, and then only that record.

Support messagesUp to 3 years after your last contact with us.

The record of a sorted support chat90 days, or until Crisp deletes the chat. The counts of topics by day, which hold no message text, are kept after that.

Website recordsWe keep none of our own about visitors. Our web host, Cloudflare, may log requests to serve and protect the site under its own terms. A site editor's sign-in session lasts 8 hours.

13.2 A merchant who wants earlier deletion can write to team@actorly.app from the store owner's address and name the store. We confirm the request and carry it out within 30 days.

13.3 Two things have a written rule but no recorded proof yet, so we do not state them as proven: that a live end-to-end customer erasure has been exercised on a store, and that no customer value survives in any saved snapshot.

Back to contents

## 14 Security measures

14.1 Stored data is encrypted at rest by Cloudflare, and calls to Shopify and to a merchant's alert address use HTTPS. We say "Cloudflare encrypts it" because that is Cloudflare's published statement about its storage, and not a separate claim of our own.

14.2 Each store's change history is kept in its own separate database, so no query reaches another store's data because there is no shared table to reach across. Account records are in a shared database and are always read by store.

14.3 Webhook requests from Shopify are verified before they are used. Alert webhooks that Actorly sends are signed. A webhook signing secret is stored encrypted.

14.4 Actorly asks Shopify only for the permissions it uses, and the five write permissions are used only to put back a field during a restore you confirmed. It adds nothing to your storefront. Edit access is used only for the kinds of record Actorly can put back today, which the Recovery page in the app lists. Actorly does not change your store on its own: a restore is a step you confirm, and Actorly reads the value again afterwards to check it.

14.5 The app's high-risk code is read by a security review step in our own process. That is an internal practice and not a certification. Actorly holds no certification of its own; the infrastructure it runs on is Cloudflare's, certified as set out in the next section. We do not describe Actorly itself as certified or compliant with any standard.

14.6 More is on the security page and in the annex to the data processing agreement.

Back to contents

## 15 Your rights, and how to use them

15.1 Depending on where you live, you may have the right to: know whether we hold your personal data and receive a copy; correct it; have it erased; restrict or object to how we use it; receive it in a portable format; withdraw consent where we rely on consent; and not be subject to a decision based only on automated processing that has legal or similarly significant effects.

15.2 Actorly does not make a decision of that kind. Who made a change is a correlation shown with a confidence, and it is not used to decide anything about a person by itself.

15.3 To use a right over data we hold as controller, such as a merchant's account details, write to team@actorly.app from the address we hold for the store, and say what you want. We may ask you to prove who you are. We respond within the times in Your privacy choices and requests below.

15.4 We do not charge for a request unless the law lets us, for example where it is repeated and manifestly excessive.

15.5 You can refuse or withdraw consent at any time where we rely on consent. Withdrawing does not affect what happened before.

Back to contents

## 16 Customers' rights, and the merchant's role

16.1 If you are a customer of a store that uses Actorly and want to use a right over your data, contact the store first, because the store decides how your data is used. We help the store carry out your request.

16.2 Shopify sends Actorly two kinds of privacy request about customers. A request to erase a customer's data is carried out automatically: Actorly removes that customer's personal values, and the personal values on the orders the request names. A request for a customer's data is not automatic. Actorly receives it and shows it to the store owner under Settings, Privacy in the app. The store owner downloads a file of what Actorly holds about that customer and replies to the customer. Shopify allows 30 days, and an overdue banner shows in the app past the deadline.

16.3 A third request, to erase a store's data, is sent 48 hours after an uninstall and removes everything for that store.

16.4 If you write to us instead, we will pass your request to the store or tell you who to contact. Our address is team@actorly.app.

Back to contents

## 17 Children's data

17.1 Actorly is for people who run businesses and is not directed at children. We do not knowingly collect personal data from children through the service. If a store's customer data includes a child, that is the store's responsibility. If you think we hold a child's data that we should not, write to team@actorly.app and we will delete it. We do not knowingly collect personal data from anyone under the age of 16, or under the age of digital consent in their country if that is higher.

Back to contents

## 18 Automated decisions and artificial intelligence

18.1 Recording a change, and working out who made it, are done by fixed rules and not by artificial intelligence. The service does not depend on artificial intelligence to function.

18.2 Artificial intelligence is used in one place that touches personal data: a support chat. A model from Anthropic, PBC reads the redacted words of the chat and picks a help topic and a kind of question from fixed lists, which become a tag on the chat for our support team and a count. It does not decide anything about you, it writes nothing that you see, and a person on the support team answers you. If Anthropic cannot be reached, or the limit we set on its use has been reached, the chat goes on without the tag from the model.

18.3 Who made a change is shown as a correlation with a confidence, from a fixed set of words, and Unknown is a permanent answer. It is not a decision about anyone.

Back to contents

## 19 Cookies and website analytics

19.1 The Actorly website at actorly.app is a separate thing from the app, and the cookie policy at actorly.app/cookies covers it in full. The website asks before it runs anything optional. It has two kinds of optional tool. Google Analytics 4 and Cloudflare Web Analytics count page views and run only if you allow analytics. The Meta Pixel and Meta's Conversions API tell Meta about page views, article reads, help center searches, chat opens and clicks, to measure our advertising, and run only if you allow marketing. Nothing else on the website uses an advertising cookie or a tracking pixel.

19.2 Until you answer the cookie banner, the website sets no cookie and sends nothing to Google or Meta, except that if you send a message in the chat we set the one cookie that keeps your conversation together (listed below). Once you answer, it sets actorly_consent, a strictly necessary cookie that remembers your answer for 13 months, and stores a record of your answer on our server: a random id, what you allowed, the banner and policy versions, the time, the page, your country and region as our host reports them, whether your browser sent Global Privacy Control, and a hash of your browser's user agent, which is not anonymous and which we treat as personal data. It holds no IP address. If you allow analytics, Google Analytics sets _ga and a _ga_ cookie, each lasting up to 2 years. If you allow marketing, the Meta Pixel sets _fbp, and _fbc if you arrived from a Meta ad, each lasting up to 3 months. Our own site editors also receive act_admin_session after they sign in with an emailed link; it is strictly necessary, lasts 8 hours, and is marked HttpOnly, Secure and SameSite=Lax. A visitor who is not signed in as an editor never receives it. If you send a message in the chat on this website, we also set __Host-act_vs, a strictly necessary cookie that keeps your chats and tickets together so that you see your own. It holds a random visitor number, the number of your current chat, the time it was issued and a signature, and no name, email address or IP address. It lasts 30 days from your last message or the last time you opened the chat, is marked HttpOnly, Secure and SameSite=Lax, is never set by opening a page or the chat, and is not used for analytics, advertising or tracking. To limit abuse of the chat, we also keep counters tied to a hash of your IP address, deleted automatically within about a minute (about an hour for new chats); a hash of an IP address is not anonymous, so we treat it as personal data.

19.3 The app inside the Shopify admin runs inside Shopify's own embedded app session, which Shopify provides and manages. Actorly adds no cookie, script or pixel to your storefront. You can change your cookie choices at any time with Your Privacy Choices in the footer, and control cookies in your browser settings.

Back to contents

## 20 Data breach notification

20.1 If we become aware of a breach of security that leads to the accidental or unlawful destruction, loss, alteration, disclosure of or access to personal data, we will investigate it, tell the affected merchants without undue delay, and tell regulators where the law requires it.

20.2 Where the GDPR requires us to notify a supervisory authority of a breach of data we hold as controller, we do so within 72 hours of becoming aware of it. For a breach of customer data we hold as processor, we tell the affected merchant without undue delay, so that the merchant can meet its own 72-hour duty as controller.

20.3 Merchants are responsible for telling their own customers where the law requires it, and we will give the information the merchant needs to do so.

Back to contents

## 21 Do Not Track and similar signals

21.1 The website does not read a Do Not Track signal, because nothing optional runs without your yes. It does read a Global Privacy Control signal and treats it as a refusal of everything optional: Google Analytics, Cloudflare Web Analytics and Marketing stay off, even if you press Accept all. It can only turn things off, except that you can still choose Analytics alone yourself. We will update this section if that changes.

Back to contents

## 22 Rights by region: GDPR, UK and California

22.1 European Economic Area. Where the EU General Data Protection Regulation applies, the rights in section 15 apply, and you may complain to your local data protection authority.

22.2 United Kingdom. Where the UK GDPR applies, the same rights apply, and you may complain to the Information Commissioner's Office at ico.org.uk.

22.3 California and other US states. Where a state privacy law such as the California Consumer Privacy Act as amended by the California Privacy Rights Act applies, you may have the right to know what personal information is collected, to delete it, to correct it, to opt out of sale or sharing, and not to be treated worse for using a right. We do not sell personal information. If you allow marketing in the cookie banner, the website shares page views, article reads, help center search words, chat opens and clicks with Meta to measure our advertising, which some US state laws call sharing for cross-context behavioural advertising. You can opt out of sale and sharing at any time with the Do Not Sell or Share My Personal Information switch in the privacy center, and a Global Privacy Control signal from your browser does the same. Reject all and Your Privacy Choices in the footer stop it too. We do not otherwise share personal information for cross-context behavioural advertising.

22.4 For the personal information of a store's customers, we act as the merchant's service provider or processor, and we use it only to provide Actorly to that store.

22.5 To use a right under any of these laws, write to team@actorly.app. An authorised agent may write for you if you prove they act for you.

22.6 We have not appointed a representative in the European Union, the United Kingdom or Switzerland. Requests and questions from those regions go to team@actorly.app.

Back to contents

## 23 Rights by region: other countries

23.1 Where the law of another country gives you more rights than this policy does, that law applies. These notes name some of those laws. They do not list every right, and they are not a statement that Actorly is certified or approved under any of them. To use a right, write to team@actorly.app or use the privacy center. We answer within the times in Your privacy choices and requests.

23.2 Brazil. Where Brazil's General Data Protection Law (LGPD) applies, you may ask us to confirm that we process your personal data, to give you access to it, to correct it, to delete it, to tell you who we share it with, and to give it to you in a portable format. You may withdraw consent where we rely on it. You may also complain to the Brazilian data protection authority, the ANPD. For Brazil, team@actorly.app is the contact for the person in charge of personal data processing (the encarregado). We have not appointed a named officer.

23.3 Canada. Where Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) applies, you may ask for access to your personal information and for it to be corrected, you may withdraw consent subject to legal and contractual limits, and you may complain to the Office of the Privacy Commissioner of Canada. In Quebec, where the Act respecting the protection of personal information in the private sector as amended by Law 25 applies, you may also ask for your personal information to be corrected or given to you in a portable format, and you may complain to the Commission d'accès à l'information du Québec. For Quebec, team@actorly.app is the contact for privacy matters, the role the Quebec law gives to a person in charge of the protection of personal information. We have not appointed a named officer.

23.4 Australia. Where Australia's Privacy Act 1988 and the Australian Privacy Principles apply, you may ask for access to your personal information and for it to be corrected. Please contact us first. If you are not satisfied with our answer, you may complain to the Office of the Australian Information Commissioner. Actorly's data is handled on Cloudflare's network, which is global, so your personal information may be handled outside Australia, as International transfers says.

23.5 Japan. Where Japan's Act on the Protection of Personal Information (APPI) applies, you may ask us to disclose the personal data we hold about you, to correct it, to stop using it and to delete it. You may also complain to the Personal Information Protection Commission. Your personal data may be handled in the United States and in other countries, as International transfers says.

23.6 South Korea. Where South Korea's Personal Information Protection Act (PIPA) applies, you may ask for access to your personal information, for it to be corrected or deleted, and for its processing to be suspended. You may also complain to the Personal Information Protection Commission. For South Korea, team@actorly.app is the contact for privacy matters. We have not appointed a named officer. Your personal information may be handled outside South Korea, as International transfers says.

23.7 India. Where India's Digital Personal Data Protection Act, 2023 applies, you may ask us for a summary of the personal data we process and who we share it with, ask us to correct, complete or erase it, and withdraw consent. For a grievance about how we handle your personal data, write to team@actorly.app, which is the contact for grievances. We have not appointed a named grievance officer. If we do not resolve it, you may complain to the Data Protection Board of India.

23.8 Switzerland. Where the revised Swiss Federal Act on Data Protection (nFADP) applies, you have the rights in section 15, and you may complain to the Federal Data Protection and Information Commissioner. Transfers of Swiss personal data use the Standard Contractual Clauses with the Swiss changes, as International transfers says.

Back to contents

## 24 Your privacy choices and requests

24.1 The privacy center, which the footer of every page links to, is where you make your choices and your requests. It lets you change your cookie choices, opt out of sale and sharing with one switch, and ask us to give you access to your personal information, delete it or correct it.

24.2 We answer a request within one month if you are in the UK or the EU, or within 45 days if you are in a US state, and we tell you if we need more time where the law allows it. The privacy center asks where you live, and if you do not say we use the shorter time.

24.3 Before we act on a request to access or delete personal information, we check that it comes from the person it concerns. When you send a request in the privacy center, we send a confirmation link to the address you gave. The link works once, for 7 days. We treat the request as verified only when you open it and press Confirm, and we do not act on a request to access or delete personal information before then. If we cannot send the message, we confirm the request by replying from team@actorly.app instead. The team replies from team@actorly.app, and the reference number the privacy center shows you is how we find your request.

24.4 We do not sell personal information. The Do Not Sell or Share My Personal Information switch keeps Marketing off for the browser you are using and records the choice. Marketing is the only setting under which the website could share personal information for cross-context advertising.

24.5 If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of sale and sharing for that browser. We also keep everything optional off: Google Analytics and Cloudflare Web Analytics do not run, Marketing stays off, and Google Consent Mode stays denied, even if you press Accept all. The cookie banner, the choices dialog and the privacy center say so, and the record of your choice notes that the signal was present. You can still choose Analytics alone, in Manage choices or in the privacy center, and we record that choice. Marketing cannot be turned on while the signal is sent.

24.6 We do not treat you worse for using a right. If we decline a request, we tell you why. If you disagree, reply to our answer with your reference number and ask us to review it.

24.7 Appeal. If you live in a US state whose law gives you the right to appeal a decision on a request, such as Colorado, Virginia or Connecticut, you may appeal by replying to our decision email at team@actorly.app with the word Appeal and your reference number. We answer an appeal within the time your state's law sets. If we deny it, you may contact your state attorney general, and where your state's law requires it, we tell you how.

24.8 We keep a record of each request, with its reference number, its type, the email address you gave, the date and the outcome, for at least 24 months.

24.9 We keep the record of each cookie choice, which the section Cookies and website analytics describes, for 24 months from the date of the choice, the same period as a request.

Back to contents

## 25 Complaints and supervisory authorities

25.1 Please contact us first at team@actorly.app and give us a chance to put it right. You also have the right to complain to a data protection authority, for example in the country where you live or work.

Back to contents

## 26 Changes to this policy

26.1 We will post changes on this page with a new effective date. For a material change, we will also tell merchants through the app, Shopify or by email to the store owner, a reasonable time before it takes effect.

26.2 This policy takes effect on 2026-10-13. If you keep using Actorly after a change takes effect, you accept the revised policy.

Back to contents

## 27 Data we do not collect

27.1 To be plain about the edges of the service, Actorly does not collect any of the following through the app.

- Payment details, card numbers or bank details of merchants or customers.
- A customer's account email address or account phone number.
- Tracking numbers or the delivery address on a fulfillment.
- Browsing, storefront or shopping behaviour. Actorly adds no script, theme code, app block or pixel to a storefront, so shoppers load nothing from it.
- Precise location, biometric data, or anything from a device.
- Data about your customers for the purpose of advertising to them or contacting them.

27.2 Free-text notes on a customer, an order or a draft order are different: they are whatever a person typed into Shopify, and Actorly stores them when they change. Please do not put special categories of personal data, such as health information, in those notes.

Back to contents

## 28 How protected values are shown to you

28.1 Stored personal values are marked as protected inside Actorly. Order notes and addresses are hidden from the merchant's screens and are shown as redacted in exports, while the fact and time of the change are kept, so you can still see that a note or an address changed.

28.2 Customer values, such as a name or a default address, are visible to the store owner on their own screens, because the store owner already holds them in Shopify.

28.3 Who in your business can open Actorly is decided by Shopify and by you. We do not add or remove people from your store's Actorly.

Back to contents

## 29 Shopify's role

29.1 Shopify is the platform Actorly runs inside, the place you install it, the way you are billed, and the source of the data Actorly stores. Shopify has its own privacy policy and its own role as a controller of the data in your store.

29.2 Shopify tells Actorly when you install, when you uninstall, when a customer asks for their data or for erasure, and when a store's data must be erased. Actorly acts when each notice arrives and does not promise Shopify's timing beyond what this policy states.

29.3 A customer data request that Shopify forwards is shown to the store owner. We do not answer a customer directly unless the store asks us to.

Back to contents

## 30 Legal and government requests

30.1 If an authority asks us for personal data we hold, we will check that the request is valid, give only what the law requires, and, where the law permits and it concerns a merchant's data, tell the merchant first so that it can object.

30.2 We do not currently publish a transparency report.

Back to contents

## 31 Links to other websites

31.1 The website and the app may link to Shopify, Cloudflare and other sites. We do not control them and this policy does not cover them. Read their policies before you give them personal data.

Back to contents

## 32 Infrastructure and certifications

32.1 Actorly runs on Cloudflare: the app runs on Workers and keeps its records in Durable Objects, D1, Workers KV and R2, and this website runs on Pages. The certifications below are Cloudflare's, stated by Cloudflare on the pages linked, and each applies as Cloudflare scopes it. Actorly itself holds no certification of its own; the infrastructure it runs on is Cloudflare's, certified as listed here. Cloudflare's reports and certificates are available from Cloudflare (its dashboard compliance documents, or its account team), not from Actorly.

- SOC 2 Type II. Cloudflare says it maintains SOC reports covering security, confidentiality and availability, and that the report given to customers covers one full year. [Cloudflare's page](https://blog.cloudflare.com/updates-to-cloudflare-security-and-privacy-certifications-and-reports/)
- ISO/IEC 27001. Cloudflare says it has been certified since 2019 and is currently certified against ISO 27001:2022. [Cloudflare's page](https://www.cloudflare.com/trust-hub/compliance-resources/iso-certifications/)
- ISO/IEC 27701. Cloudflare says it is certified as a PII Processor and PII Controller (ISO 27701:2019) since 2021. [Cloudflare's page](https://www.cloudflare.com/trust-hub/compliance-resources/iso-certifications/)
- ISO/IEC 27018. Cloudflare says it is certified (ISO 27018:2019) since 2022. Cloudflare says its ISO certifications cover its global cloud platform and subsidiary offices. [Cloudflare's page](https://www.cloudflare.com/trust-hub/compliance-resources/iso-certifications/)
- PCI DSS. Cloudflare says a Qualified Security Assessor evaluates it each year as a Level 1 Merchant and a Service Provider. [Cloudflare's page](https://blog.cloudflare.com/updates-to-cloudflare-security-and-privacy-certifications-and-reports/)
- Cloudflare D1. Cloudflare states that D1 is covered by Cloudflare's SOC 2 and ISO 27001 compliance certifications. [Cloudflare's page](https://developers.cloudflare.com/d1/reference/data-security/)

Back to contents

## 33 Contact

33.1 ONDUTYOPS LLC. Email: team@actorly.app. Postal address: Coastal Highway, Lewes, Delaware 19958, United States.

33.2 We have not appointed a data protection officer. Questions about this policy go to the company's privacy contact at the address above.

Back to contents

[Terms of service →](https://admin.actorly.app/terms)[Data processing agreement →](https://admin.actorly.app/dpa)[Data protection and your rights →](https://admin.actorly.app/gdpr)[Cookie policy →](https://admin.actorly.app/cookies)[Subprocessors →](https://admin.actorly.app/subprocessors)