Terms of Service

Part A: Terms of Service

1. The service

POPLoad lets your customers upload a photo or screenshot of their bank transfer or deposit receipt on your Thank you and Order status pages, and lets you review it, approve it (which marks the order as paid in Shopify) or deny it.

2. POPLoad does not verify payments

POPLoad collects receipts and shows warning signs (such as a reused file or reference number, an image that doesn't look like a receipt, or an amount that doesn't match). It does not confirm that money was received. You are responsible for checking your bank account before approving an order. We are not liable for losses from approving an order whose payment was not received.

3. Plans and billing

• Each store gets 10 free uploads in total (lifetime, not per month). Reinstalling does not reset this count.
• After that, you can choose Starter at US$9.99 every 30 days for up to 50 uploads per 30-day period, Starter annual at US$99 per year (still up to 50 uploads per 30-day period), Pro at US$14.99 every 30 days for unlimited uploads, or Pro annual at US$129 per year, billed by Shopify on your Shopify invoice. Cancel anytime by uninstalling or cancelling in Shopify; Shopify handles refunds under its billing rules.
• Without an active plan after the free uploads, customers are asked to contact you instead of uploading.

4. Your responsibilities

• Use POPLoad only for genuine orders on your own store, and in line with Shopify's terms and the law.
• Tell your customers how you handle their data (your store privacy policy should mention that receipts are collected through POPLoad).
• Keep your Shopify staff accounts secure, and only add staff to POPLoad who need to review payments.

5. Availability and changes

We aim to keep POPLoad available but don't guarantee uninterrupted service. We may change features or these terms; material changes will be announced in the app or by email at least 14 days before they apply.

6. Liability

POPLoad is provided "as is". To the extent the law allows, our total liability is limited to the fees you paid us in the 3 months before the claim. We are not liable for indirect losses or lost profits.

7. Ending

You can stop at any time by uninstalling. We may suspend a store that misuses POPLoad. After uninstall, data is deleted as described in Part B.

8. Law

These terms are governed by the laws of the Republic of the Philippines. Any dispute will be brought exclusively before the proper courts of Taguig City (Fort Bonifacio), Metro Manila.

Part B: Data Processing Terms

1. Roles

For your customers' personal data, you are the controller (or "personal information controller" under the Philippine Data Privacy Act of 2012) and we are your processor. We process it only to provide POPLoad, on your instructions as set by your use of the app.

2. Data we process

• Customer name and email from the order.
• The receipt image, and the optional reference number and sender name the customer types.
• Order number, total and payment method name.
• Your staff's name and email when they view, approve or deny a receipt (activity log).

3. Where it is stored

• Receipt images: in your own store's Shopify Files.
• Everything else: our database hosted on Railway (encrypted at rest; HTTPS in transit).
• The app runs on Railway. Shopify provides the platform, billing and authentication. Receipt text is read on our own server; no receipt is sent to any other third party.

4. Security

Access to the dashboard is limited to the store owner and staff the owner allowlists. Each receipt view is logged. Only the operator has access to our hosting, code and database, protected by strong passwords and two-factor authentication.

5. Subprocessors

Railway (hosting and database) and Shopify (platform). We'll update this list, and tell you, before adding another subprocessor that receives personal data.

6. Breaches

If we become aware of a breach affecting your customers' data, we will notify you and Shopify without undue delay and within 72 hours, with what we know, and help you meet any duty to notify customers or the National Privacy Commission.

7. Requests and deletion

• Customer requests reach us through Shopify (customers/data_request, customers/redact); we answer data requests within 30 days and delete redacted customers' records.
• 48 hours after you uninstall, Shopify asks us to delete your store's data (shop/redact) and we do. We keep only an anonymised count of uploads (a one-way hash of your store address and a number), with no customer or order data, to enforce the free tier.
• Receipt files in your Shopify Files stay under your control; delete them there if you wish.

8. Confidentiality

Anyone at MindLab Future with access to personal data is bound to keep it confidential.