Terms of Service & Data Processing Agreement

Last updated: 13 October 2026

1. Parties and scope

These Terms govern the use of the Attribeam Shopify application ("the App"), provided by Creators it consulting d.o.o., Croatia ("we", "the Provider"), by the merchant who installs it ("you", "the Merchant"). By installing the App you accept these Terms, including the Data Processing Agreement in section 9.

2. The service

The App records storefront and checkout events of your Shopify store, recognises returning visitors, and sends conversion events server-side to the advertising, analytics and e-mail platforms you connect. It also provides tracking, attribution and audience reports inside Shopify admin.

3. Fees

• Start: USD 49 per 30 days, 500 tracked orders included, then USD 0.08 per additional order (capped at USD 200 per billing period).
• Scale: USD 149 per 30 days, 3,000 tracked orders included, then USD 0.05 per additional order (capped at USD 500 per billing period).
• Pro: USD 399 per 30 days, 15,000 tracked orders included, then USD 0.03 per additional order (capped at USD 1500 per billing period).

New stores get a 14-day free trial. All charges are billed by Shopify on your Shopify invoice. You can change or cancel your plan at any time in the App; cancelling stops future charges and stops event sending.

4. Your responsibilities

• You are the data controller for your store's visitor and customer data and must have a lawful basis (for example consent collected through a cookie banner) for the tracking and marketing you configure.
• You must inform your customers about this processing in your store's privacy notice.
• You are responsible for the platform accounts and API credentials you connect, and for complying with those platforms' terms.
• You must not use the App for unlawful purposes or to process special categories of personal data.

5. Availability and support

We operate the App with care and monitor its availability, but we do not guarantee uninterrupted service. Support is provided by e-mail at info@crotechcreators.com within the response time of your plan.

6. Liability

To the extent permitted by law, our total liability arising from the App is limited to the fees you paid in the 12 months before the claim. We are not liable for indirect damages, lost profits, or decisions made by third-party advertising platforms.

7. Termination and deletion

You can stop using the App at any time by uninstalling it. Access tokens are deleted immediately on uninstall; all store data is deleted when Shopify sends the shop/redact request (48 hours after uninstall).

8. Changes and governing law

We may update these Terms; material changes will be announced in the App at least 30 days in advance. These Terms are governed by the laws of the Republic of Croatia.

9. Data Processing Agreement (GDPR Art. 28)

9.1 Roles

The Merchant is the controller and Creators it consulting d.o.o. is the processor of personal data processed through the App on the Merchant's behalf.

9.2 Subject matter, nature, purpose and duration

Collecting store events, recognising visitors and forwarding conversion events to the platforms the Merchant configures, and providing reports — for as long as the App is installed, plus the deletion period in section 7.

9.3 Data subjects and data categories

• Data subjects: visitors and customers of the Merchant's store.
• Data: online identifiers (visitor ID, cookie and click IDs), device and browser data, IP address, page and product events, order data (order ID, value, products), and contact data the customer gave the store (name, e-mail, phone, address).

9.4 Processor obligations

• We process personal data only on the Merchant's documented instructions, which are the App configuration chosen by the Merchant.
• Everyone with access to the data is bound by confidentiality.
• We apply the technical and organisational measures described on our Security page (GDPR Art. 32).
• We help the Merchant answer data subject requests; Shopify's customers/data_request and customers/redact requests are handled automatically.
• We notify the Merchant of a personal data breach without undue delay and at the latest within 48 hours after becoming aware of it.
• At the end of the service we delete all personal data (section 7), unless law requires storage.
• We make available the information needed to demonstrate compliance and allow audits on reasonable notice.

9.5 Sub-processors

• Hetzner Online GmbH, Germany — hosting, database and encrypted backups (data centres in Germany and Finland, EU).
• Shopify — platform on which the App runs and through which data is received.

Advertising, analytics and e-mail platforms (for example Meta, Google, TikTok, Klaviyo) receive data only because the Merchant connects them; they act under the Merchant's own agreements with those platforms. We will inform Merchants of new sub-processors at least 30 days in advance; Merchants may object by uninstalling the App.

9.6 International transfers

The App stores data in the EU. Transfers to platforms outside the EU happen only on the Merchant's instruction and under that platform's transfer mechanisms.

10. Contact

Creators it consulting d.o.o., Croatia — info@crotechcreators.com