Data Processing and Privacy Agreement 

Data Processing and Privacy Agreement Confirm Address - Address Guardian Apps 1. Purpose and Scope This Data Processing and Privacy Agreement ("Agreement") describes the privacy and data-protection commitments that apply when a Shopify merchant uses Confirm Address (the "App") provided by Address Guardian Apps ("Provider"). The App helps merchants reduce shipping errors by allowing customers to review, confirm, or correct shipping-address information before fulfillment. 2. Roles of the Parties The merchant determines the purposes for which customer and order information is collected and used within its Shopify store. Address Guardian Apps processes information only as necessary to provide, secure, support, and maintain the App, subject to Shopify permissions, the merchant's instructions, this Agreement, and applicable law. 3. Categories of Data Processed Depending on the merchant's use of the App, the App may process order identification information, customer name, shipping address, city, state or province, postal code, country, and address-confirmation or correction status. The App is intended to process only the minimum data reasonably necessary for its functionality. 4. Processing Instructions and Purpose Limitation Address Guardian Apps will process personal data only to provide the App's address-review, confirmation, correction, merchant-dashboard, security, troubleshooting, and support functions, or as otherwise required by applicable law. Personal data will not be sold or used for unrelated advertising or profiling. 5. Confidentiality and Access Controls Access to systems that may process merchant or customer information is limited to authorized access. Administrative accounts are protected using strong authentication controls. Access to personal data is restricted to what is reasonably necessary to operate, support, secure, or troubleshoot the App. 6. Security Measures Address Guardian Apps uses reasonable administrative and technical safeguards intended to protect data processed through the App. These measures include HTTPS/TLS for data in transit, controlled administrative access, credential rotation capabilities, version-controlled source code, security-relevant logging, and documented incident-response and data-loss-prevention procedures. 7. Service Providers and Subprocessors The Provider may use infrastructure, hosting, source-control, security, and technical service providers as necessary to operate the App. Such providers are expected to process information only for the services they provide and subject to their applicable contractual and security commitments. 8. Data Retention and Minimization The App is designed to rely on Shopify as the primary system of record for order and shipping information and to avoid unnecessary duplicate storage. Personal data should be retained only for as long as reasonably necessary to provide the App, maintain security, comply with legal obligations, or resolve incidents or disputes. 9. Security Incidents If Address Guardian Apps becomes aware of a security incident involving personal data processed through the App, it will take reasonable steps to contain, investigate, remediate, and document the incident. Shopify and affected merchants will be notified when required by applicable law, Shopify requirements, or the circumstances of the incident. 10. Data Subject and Merchant Requests Where applicable, Address Guardian Apps will reasonably assist merchants with requests involving access, correction, deletion, or restriction of personal data processed through the App, taking into account the App's role and the information available to it. 11. Return or Deletion When personal data is no longer reasonably necessary for the App's stated purposes, Address Guardian Apps will seek to delete or cease processing such data, subject to legal, security, operational, or dispute-resolution requirements. Where the App relies on Shopify as the primary data source, deletion within Shopify remains under the merchant's and Shopify's control. 12. Merchant Responsibilities The merchant is responsible for using the App lawfully, maintaining appropriate notices and permissions for its customers, configuring its Shopify store appropriately, and ensuring that its instructions to the Provider comply with applicable privacy and data-protection laws. 13. Changes to this Agreement Address Guardian Apps may update this Agreement when the App, applicable law, Shopify requirements, or operational practices change. Material updates should be reflected by updating the effective date and making the revised version available to merchants. 14. Contact Provider App Support email Address Guardian Apps Confirm Address catyleite94@gmail.com Effective date September 26, 2026 Implementation note: this document should be made available to merchants and incorporated into the App's applicable terms or acceptance flow before relying on it as an executed contractual commitment