This notice describes the security practices and incident response commitments that apply to Ye Pixel, a first-party conversion analytics service for Shopify merchants. It should be read together with the Ye Pixel Privacy Policy and, where applicable, the Ye Pixel Data Processing Agreement.
1. Coverage
This notice covers information processed by Ye Pixel, including storefront activity, verified order information, merchant reporting, customer matching where permitted, and the destinations a merchant chooses to connect.
It does not cover Shopify's own systems or third-party services that a merchant connects to Ye Pixel. Those services apply their own security terms.
2. Roles
The merchant determines why and how shopper information is processed and is responsible for its storefront privacy notices and consent choices. YEEDOOR processes information on the merchant's behalf to provide Ye Pixel.
3. Information we protect
- Merchant account and support information.
- Storefront activity events and pseudonymous session or visitor identifiers.
- Verified Shopify order information.
- Shopper name and email address, where the merchant has the required approvals and the shopper has given the applicable consent.
- Delivery records and limited security information.
We design the service to avoid passwords, payment card details, raw browsing URLs, and unnecessary customer contact information.
4. Access control
Access to production information is limited to authorized personnel who need it to operate, support, and secure the service. We apply least-privilege permissions, protect administrative credentials, review access when roles change, and remove access when it is no longer needed.
Administrative access requires strong authentication. Merchant users see only the stores and information their accounts are authorized to access.
5. Encryption and data protection
We use encrypted connections for information in transit between browsers, our service, and connected destinations. We protect stored credentials and matching keys through encryption or irreversible hashing. Customer email addresses and names are stored in encrypted form (AES-256-GCM) and are shown only to authorized merchant users. Email match keys are irreversibly hashed before use. Raw values are never written to logs or included in analytics event payloads. Backup copies are encrypted with AES-256-GCM.
We rely on our cloud hosting provider for physical and logical safeguards around production storage. Access to production information is restricted and monitored.
6. Security monitoring and records
We maintain security records of administrative and security-relevant activity. Records are designed to avoid customer contact details and are used to detect misuse, investigate incidents, and maintain service reliability. We review security events and service health on an ongoing basis.
7. Vendor management
We use hosting, data storage, monitoring, and support providers to operate Ye Pixel. These providers are selected with security and reliability in mind and are bound by confidentiality and data protection commitments. We review our service provider relationships as the service evolves.
8. Backup and recovery
We maintain backup and recovery arrangements designed to protect service availability and data integrity. Backup copies are encrypted with AES-256-GCM, retained for a limited period, are not used for analytics, and expire on their normal cycle.
9. Incident response and notification
We maintain an incident response process designed to detect, contain, investigate, remediate, and document security incidents.
If we confirm a personal data breach affecting a merchant's information, we will:
- notify the affected merchant without undue delay and, where required, no later than 72 hours after confirmation;
- describe the nature of the incident, the categories of information affected, the likely consequences, and the measures taken or proposed;
- provide a contact point for further information;
- cooperate with required regulatory notifications and the merchant's reasonable requests.
We will not delay notification to complete a full investigation.
10. Retention and deletion
We retain information only for as long as needed for the purposes described in our Privacy Policy and for legal, tax, audit, or dispute requirements.
When a valid customer deletion request is processed, we delete or irreversibly de-identify the associated event, order, delivery, and matching records. Backup copies expire on their normal cycle and are not used for analytics.
Details are available in the Ye Pixel Data Retention and Subprocessors Notice.
11. Merchant responsibilities
Merchants are responsible for:
- providing accurate privacy notices and obtaining required consent;
- setting their storefront privacy preferences;
- connecting only destinations they are authorized to use;
- protecting their own account credentials and user access;
- not choosing settings in Ye Pixel that collect information they do not need or are not permitted to process.
12. Shared responsibility
Security is a shared responsibility. YEEDOOR secures the Ye Pixel service and its processing environment. Shopify secures the Shopify platform. Merchants secure their storefront settings, accounts, and connected destinations. Shoppers control their consent choices through the merchant's storefront.
13. Audit and documentation
We maintain records sufficient to describe our security measures, service providers, retention practices, and incident response process. Merchants may request a summary of these records. Where required by law or a supervisory authority, an audit may be conducted on reasonable notice, subject to confidentiality and security requirements, and limited to the systems relevant to Ye Pixel.
14. No absolute security
No method of transmission or storage is completely secure. We continually review and improve our safeguards, but we cannot guarantee absolute security.
15. Reporting a security concern
If you believe you have found a security issue or have a concern about Ye Pixel, contact us at aiken@yeedoor.com with the subject “Security report — Ye Pixel”.
We aim to acknowledge reports within one business day and will prioritize issues that may affect personal data.
16. Contact
YEEDOOR
Hangzhou Yidao Chuhai Digital Technology Co., Ltd.
Website: www.yeedoor.com
Support: www.yeedoor.com/support
Email: aiken@yeedoor.com