Data Processing Addendum
Last updated: 5 September 2026
This addendum applies where the EU General Data Protection Regulation (GDPR) or the UK GDPR applies to a merchant’s use of TrackAlive. It supplements our Privacy Policy and our Terms of Service.
1. Parties
This addendum is between the merchant using TrackAlive (the “controller”) and Aurevia Systems Pty Ltd, trading as TrackAlive, of Melbourne, Australia (the “processor”).
2. Subject matter
Processing of daily Shopify order counts, checkout tokens recorded by TrackAlive’s web pixel, and Google Analytics 4 purchase-event counts, for the purpose of daily conversion-tracking reconciliation.
3. Duration
This addendum applies for as long as the merchant has an active TrackAlive subscription, and until data is deleted under section 8 below.
4. Nature and purpose of processing
Automated daily comparison of order counts, pixel events and GA4 purchase counts to detect and alert the merchant when conversion tracking appears to be broken.
5. Categories of data
TrackAlive does not process personal data belonging to the merchant’s own customers. It processes merchant contact data: a contact email address, an optional Slack webhook URL, and an encrypted Google OAuth refresh token used to read GA4 data on the merchant’s behalf.
6. Sub-processors
- Railway, application hosting and database, United States
- Google, GA4 Data API access, global
- Resend, alert email delivery, United States
- Slack, alert message delivery, United States
7. Security measures
Data in transit is protected with TLS. Google refresh tokens are encrypted at rest with AES-256-GCM. Access follows least-privilege scopes.
8. Deletion on termination
Within 48 hours of receiving Shopify’s shop/redact webhook after uninstall, we delete all data associated with the merchant’s shop.
9. Assistance with data subject requests
We will assist the merchant, on written request to hargravelabs@gmail.com, in responding to data subject access, correction or deletion requests, to the extent the request concerns data we hold.
10. Audit
On reasonable written request, we will provide information necessary to demonstrate compliance with this addendum.
11. Contact
Questions about this addendum can be sent to hargravelabs@gmail.com.