What governs our service today
While the public Terms are being finalized, three documents already define the legal envelope of the Service:
The Privacy Policy describes what data we collect, how we use it, and how merchants and end-users exercise their data-protection rights.
The Data Processing Addendum (DPA) binds the data-processing relationship between Cervito (processor) and the merchant (controller), including GDPR Article 28 obligations, breach notification windows, and the Sub-processor list.
For Shopify-installed merchants, the Shopify API License and Terms of Use applies in parallel and governs use of the Shopify Admin API surface we depend on.
Need a written agreement now?
Email legal@cervito.app with your store name and the use case. We typically reply within one business day with a draft engagement letter and the current DPA pre-signed by us — ready for counter-signature.
Will I be notified when the public Terms publish?
Yes. When the public Terms are published, every active merchant receives an email with the final document plus a 30-day review window before the Terms take effect for their account. There will be no auto-acceptance.