Merchant service and data protection terms

Version:17October2026.

Service and responsibilities

Viera Consignment Control is provided by NGUYỄN VĂN HÙNG, operating Viera. Contact: support@vievot.com. These terms describe the service and our processing of the merchant's data. “Merchant” means the business operating the Shopify shop; its representative must be authorized to act for it. Review these terms and our Privacy notice before using the service. Contact us if you need to arrange or confirm an applicable processing agreement. Viewing this page does not record your acceptance.

Viera assigns consignors to merchandise, applies versioned commission rules, reconciles sales, discounts and refunds, records merchant-approved external payments, imports reviewed historical records and provides scoped statements. Shopify remains the source for checkout, orders and inventory. Viera does not transfer funds, debit consignors, collect debts, act as a bank or provide tax/accounting compliance advice. You review incomplete sources, exceptions, imports, balances and payment records, make payments separately and remain responsible for your obligations to consignors. Calculations and pending obligations do not authorize a payment or debt collection.

The complete plan is USD29/month with no free trial and no additional Viera transaction fee. Shopify and payment-provider charges may apply separately. Charges and cancellation follow the actual Shopify App Pricing subscription presented to and approved by you. You can review or cancel that subscription through Shopify. A development test subscription does not constitute a production payment. This page does not create or activate a subscription.

Your instructions and our use of data

Where you determine the purposes and essential means of processing, you are the controller and Viera processes the information on your behalf. If you act for another controller, you must have authority to instruct this processing. Your authorized app configuration and verified requests supply instructions within this service. You are responsible for lawful source data, required notices and permissions, and accurate consignor/financial instructions. Installation is not customer consent.

We process shop and installation identifiers; merchant-entered consignor names and optional statement emails; product/variant assignments; commission versions; necessary order, line, agreement, refund, return and transaction identifiers; dates, quantities, discounts and amounts; financial entries, payout records, settlement references, obligations, imported history and necessary security/request records. Shopify authentication credentials are used to authorize access. Stored order projections exclude buyer name, address, phone and email. Order/refund records remain protected customer data. Keep notes and payment references free of unnecessary personal information.

We use this information only to deliver the service and necessary tenant-specific support, security and privacy assistance. We do not sell or rent it, use it for advertising or cross-merchant marketing, or train, fine-tune, evaluate or benchmark AI/ML models with it. We do not send merchant data to an AI service. A generic software correction does not permit transferring your data to another merchant or product.

Confidentiality, providers and locations

We restrict access to authorized people with a necessary service purpose and confidentiality obligations, protect authentication credentials, separate stores and provide scoped statement links. Anyone holding a valid consignor link can view its specified statement until expiry or revocation; share links only with intended recipients. Encryption in transit and Cloudflare D1 encryption at rest protect hosted data. No system can promise absolute security.

Cloudflare Workers and D1 supply hosting, execution and storage for this service. Shopify supplies platform records, authentication, checkout and app billing under its applicable terms. Database placement in APAC does not guarantee exclusive regional processing: Workers may execute globally. No exclusive data-residency undertaking is offered. We use providers only for the stated service purposes and applicable confidentiality/data-protection obligations. If a proposed provider or processing change materially affects your data, we will inform you before that change and provide a contact route for objections or termination. This wording does not claim that a particular international-transfer mechanism applies to every merchant; contact us before supplying data if you require a specific mechanism or location commitment.

Requests, retention and ending use

Contact support@vievot.com for verified access, correction, erasure, processing objections or return-of-data instructions. We verify the requesting party, shop and scope and assist within the service's responsibilities. Use the authenticated export and privacy-request tools where appropriate; preparing or downloading records is separate from delivering a complete response. We assess confirmed personal-data incidents, restrict unsafe processing and inform affected merchants without undue delay as applicable obligations require. No fixed response-time or recovery SLA is offered here.

Financial records and consignor configuration are retained for your active recordkeeping service, subject to verified erasure instructions. Uninstall immediately revokes app access. Shopify's later verified shop-erasure instruction invokes deletion of the store's live financial/configuration records and related request/access records after the installation checks. Reinstallation uses a new installation authority; it does not revive the old one. Minimal installation/deletion markers remain to prevent erased data or obsolete access from returning. We do not claim a statutory accounting-retention exemption or a universal seven-year period.

Consignor links expire after24hours and deny access immediately on revocation; maintenance removes expired/revoked link rows and expired sessions. Explicitly fulfilled privacy-request rows are removed after30days; pending work retains its original response deadline and remains subject to review. Raw webhook delivery receipt identifiers expire after90days; raw payloads are not retained. Financial source-idempotency records follow the underlying financial history. Privacy-action audits remain until shop erasure.

Verified complete customer-redaction scopes are processed against their held order records. Removing source links alone can leave linkable financial amounts and does not anonymize those records. Full live-scope erasure and the disposition of recovery/export copies are separate steps; an incomplete scope or unresolved copy must not be represented as completed erasure. Financial history affected by deletion may require reconciliation before further payouts.

Our current Cloudflare Paid D1 plan retains provider-managed recovery history for 30 days; configured Workers Logs have a 7-day retention window. Deleting a live row does not immediately remove provider history. The normal service does not create routine operator-download backups. If an authorized recovery operation creates an additional copy, its protection, purpose and expiry require separate handling. Restored state must be reconciled with current deletion restrictions before it is served. Copies you independently download are under your control. On termination or a valid return/deletion instruction, we will coordinate return or deletion of in-scope data and accurately identify remaining copies or a specifically applicable mandatory retention exception. No blanket indefinite-retention exception is granted.

Changes and contact

We identify material service/privacy changes and communicate them before applying them to existing merchant data. If you cannot accept a proposed change, contact us to arrange export and ending use. Applicable mandatory rights are preserved. Questions about these terms, privacy or support: NGUYỄN VĂN HÙNG, Viera, support@vievot.com.

Privacy notice · Help and contact · Viera Consignment Control