Last updated: October 10, 2026
This Data Processing Addendum ("DPA") forms part of the Terms of Service between the Merchant and DODO Co., Ltd. ("Processor"). It applies when the Processor processes personal data of the Merchant's customers on the Merchant's behalf through a pattotool app.
The Merchant is the controller (or business). The Processor is the processor (or service provider) and processes personal data only on the Merchant's documented instructions, which consist of these terms and the Merchant's use and configuration of the app.
The Merchant authorizes the use of the sub-processors listed in the Privacy Policy. The Processor binds each sub-processor to data protection obligations no less protective than this DPA and will notify the Merchant of new sub-processors by updating the Privacy Policy before they begin processing. The Merchant may object on reasonable data protection grounds by uninstalling the app.
Personal data may be processed outside the data subject's country. Where required, the Processor relies on appropriate safeguards under applicable law, such as standard contractual clauses or measures required by Japan's Act on the Protection of Personal Information.
The Processor will notify the Merchant without undue delay after becoming aware of a security incident affecting the Merchant's personal data, and will provide available information the Merchant reasonably needs to meet its own notification obligations.
After the app is uninstalled, the Processor deletes the Merchant's data within 30 days of receiving Shopify's shop deletion request. Customer-specific deletion requests are completed within 30 days of receipt.