> ## Documentation Index
> Fetch the complete documentation index at: https://docs.pcnaid.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Data processing agreement summary

> Data processing agreement summary — Abandoned Cart Pro

# Data processing agreement summary

This summary describes the data-processing role for Abandoned Cart Pro. It is not a substitute for a signed Data Processing Agreement.

## Roles

The merchant acts as controller for merchant and customer data. Pcnaid Inc. acts as processor when operating the app on behalf of the merchant.

## Processing purpose

Processing is limited to authenticating the merchant, reading abandoned checkout details, creating draft orders when instructed, maintaining conversion records, handling bulk conversion jobs, sending recovery messages the merchant enables, recording storefront visitor identifiers and consent flags when tracking is enabled, delivering data to integrations the merchant connects (such as Resend, Klaviyo, or merchant webhook destinations), and processing privacy webhooks. See the [privacy notice](https://docs.pcnaid.com/nodes/shopify/abandoned-cart-pro/merchant/help/privacy.md) for the full list.

## Data categories

Processed data may include merchant shop identifier, staff or shop label, customer email, customer ID, cart contents, totals, discount codes, checkout notes, billing and shipping address fields, abandoned checkout URL, draft order identifiers, and operational status or error records.

## Security measures

The app uses authenticated admin access, webhook verification, environment-provided secrets, PostgreSQL storage, idempotency controls, and limited operational access.

## Subprocessors

The app uses these subprocessors, as listed in the [Privacy policy](https://docs.pcnaid.com/nodes/shopify/abandoned-cart-pro/merchant/help/privacy.md):

<ul>
  <li>Shopify: supplies checkout data and sends native recovery invoices.</li>
  <li>Resend: sends custom recovery email when the merchant selects it.</li>
  <li>Klaviyo: receives recovery events when the merchant configures it.</li>
  <li>Sentry: error reporting.</li>
  <li>PostHog: installation telemetry identified by shop domain, when configured.</li>
</ul>

## Deletion and assistance

Pcnaid Inc. will assist with data requests, customer redaction, and shop redaction through implemented webhooks and support requests.

See the [Privacy policy](https://docs.pcnaid.com/nodes/shopify/abandoned-cart-pro/merchant/help/privacy.md) and the [Terms of service](https://docs.pcnaid.com/nodes/shopify/abandoned-cart-pro/merchant/help/terms.md). Contact support at [[Support@pcnaid.com](mailto:Support@pcnaid.com)](mailto:Support@pcnaid.com).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.