Privacy Policy

Last updated: October 10, 2026

This policy explains how DODO Co., Ltd. ("pattotool", "we", "us") collects, uses, and protects information when a merchant installs one of our apps. It applies to all pattotool apps. App-specific details are listed in section 3.

1. Who we are

DODO Co., Ltd., 758-47 Kihara, Chuo-shi, Yamanashi 400-1511, Japan. Contact: [email protected].

For personal data about a merchant's customers, the merchant is the controller and we act as a processor on the merchant's behalf. Our Data Processing Addendum forms part of our agreement with each merchant.

2. Information we collect from merchants

When you install an app, Shopify gives us access to your store according to the permissions you approve. We collect:

Store information: shop domain, store name, plan, currency, and time zone.
Account contact: the store owner's name and email address, used only for service and billing communication.
App settings you create, such as form fields and tag rules.
Technical data: access tokens (stored encrypted), error logs, and basic usage events needed to operate and improve the app.

We do not collect payment card details. Charges for our apps are processed by Shopify.

3. Information about your customers (by app)

Patto Customer Fields

Data	Why we process it	Where it is stored
Customer ID	To link a customer's answers to their account and apply tags	Your Shopify store; our database for processing records
Answers to the fields you configure (for example birthday, company, industry)	To save the answers your customers submit and show them to you	Primarily in your Shopify store as customer metafields
Customer tags	To apply the tag rules you set	Your Shopify store

You decide which fields to collect. Please do not configure fields that request sensitive information (such as health, government ID, or payment details). If you choose to display customer names or email addresses in the app, we access those fields only to show them to you inside your Shopify admin.

4. How we use information

To provide, maintain, and support the app features you use.
To process billing through Shopify and contact you about your account.
To detect, investigate, and fix errors and security issues.

We use customer data only to provide the app's features to you. We do not sell personal data, use it for advertising, or use it to train machine learning models. We do not make automated decisions with legal or similarly significant effects on your customers.

5. Sharing and service providers

We share information only with providers that help us run the apps, under contracts that require them to protect it:

Provider	Purpose	Location
Shopify	App platform and billing	Canada / United States and others
Cloudflare	Website hosting and support email forwarding	United States and others
Google	Support email inbox	United States and others

Information may be transferred to and processed in countries other than your own, including the countries listed above. We take steps required by applicable law, including the Act on the Protection of Personal Information of Japan, when transferring data across borders. We may also disclose information if required by law.

6. Retention and deletion

While the app is installed, we keep data only as long as needed to provide the features.
When you uninstall an app, Shopify notifies us. We delete your store's data from our systems within 30 days of receiving Shopify's shop deletion request.
When Shopify sends us a request to delete a specific customer's data, we delete it within 30 days.
Data saved in your Shopify store (such as metafields and tags) remains in your store and is under your control.

7. Security

All data is encrypted in transit (TLS) and at rest.
Access to production data is limited to the people who operate the service and is protected by strong authentication.
Test and production data are kept separate.
We maintain an incident response process and will notify affected merchants without undue delay if a security incident affects their data.

8. Your rights and your customers' rights

Depending on where you or your customers live (for example under the GDPR, the CCPA, or Japan's APPI), individuals may have the right to access, correct, delete, or restrict the processing of their personal data, and to object to or opt out of certain processing.

Merchants can contact us at [email protected].
Customers should contact the merchant they bought from. When a merchant or Shopify forwards a data access or deletion request, we respond within 30 days.

9. Changes to this policy

We may update this policy. If changes are material, we will notify merchants by email or in the app before they take effect.

10. Contact

DODO Co., Ltd., 758-47 Kihara, Chuo-shi, Yamanashi 400-1511, Japan
[email protected]