Data processing for customer-controlled commerce data.
This Data Processing Addendum explains how EntryLap processes customer-controlled ecommerce event data for reporting, traffic quality, product intelligence, journey analysis and event delivery monitoring.
Last updated: June 28, 2026. Data processing questions can be sent to entrylap@gmail.com.
1. Processing purpose
EntryLap processes data to provide ecommerce intelligence and tracking infrastructure selected by the customer.
- Server-side event collection and dashboard reporting.
- Bot, suspect and human traffic classification.
- Purchase intent, product readiness and customer journey intelligence.
- Platform delivery logs for Meta, Google and other configured destinations.
2. Data categories
Processed data may include account, store, visitor, event, technical and delivery-status data needed to operate the workspace.
- Account data: name, email, workspace and login provider.
- Store data: domain, platform, install method, pixel or tag configuration.
- Event data: ecommerce events, UTM, timestamps, visitor/session ID, device category and delivery status.
3. Subprocessors
EntryLap may rely on trusted vendors to host infrastructure, store data, send email, process payments, log errors and support platform integrations.
- Subprocessors are documented and updated when materially changed.
- Customer data is used only to provide the contracted EntryLap services.
- Vendors are required to provide appropriate confidentiality, security and data protection commitments.
4. Retention and deletion
Retention periods can vary by workspace, plan, legal need and technical logs required for security or dispute handling.
- Customer may request workspace export or deletion through support.
- Some logs may be retained temporarily for abuse prevention, billing, legal or security reasons.
- Deletion requests should include the store domain and account email.
5. International transfers
When data crosses regions, EntryLap uses appropriate contractual, organizational and vendor safeguards for the applicable jurisdiction.
- EU customers may request DPA terms and transfer details.
- US customers may request privacy and deletion workflow documentation.
- Customers should avoid sending unnecessary sensitive data into event payloads.
Need help with this policy?
Contact EntryLap for account, privacy, billing or Shopify installation questions.