PART 1: GENERAL TERMS OF SALE

1. PREAMBLE

These General Terms of Sale (hereinafter "Terms of Sale") govern the contractual relationship between:

The Publisher:

And

The Client: any natural or legal person subscribing to the Social Place application via the Shopify App Store.

The Social Place application is a software solution that enables merchants using the Shopify platform to create and manage a community forum directly integrated into their online store.

2. PURPOSE

The purpose of these Terms of Sale is to define the conditions under which the Publisher provides the Client with access to and use of the Social Place application, as well as the rights and obligations of the parties in this context.

3. ACCEPTANCE OF TERMS

The installation of the Social Place application and/or the subscription to one of the proposed pricing plans implies full and complete acceptance of these Terms of Sale by the Client.

These Terms of Sale are accessible at any time on the website https://socialplace.app and shall prevail over any other version or any other contradictory document.

4. DESCRIPTION OF SERVICES

The Social Place application offers the following features:

• Creation of a community forum integrated into the Client's Shopify store
• Publication of posts, comments, and reactions by members
• Creation of polls
• Automatic login system via Shopify customer accounts
• Administration and moderation interface accessible from the Shopify admin
• Real-time notifications
• SEO optimization of generated content
• Unlimited members
• Technical support via email and chat

Additional advanced features may be offered in the future.

5. SUBSCRIPTIONS, PRICING AND CONDITIONS OF USE

5.1 Available subscriptions

Social Place offers paid subscriptions. As of the date these Terms of Sale were updated, the public prices are:

• Community Builder: USD 29.99 per 30-day period
• Instagram: USD 49.99 per 30-day period
• Scale: USD 199.99 per 30-day period

Prices are in US dollars (USD). Each plan's features, usage limits and prices are detailed on the Shopify App Store listing and presented to the Client before they confirm their subscription. The terms approved at confirmation determine the applicable billing conditions.

5.2 Trial and special terms

Each plan offers a 7-day trial, subject to the eligibility conditions shown at activation. After the trial, billing begins under the approved subscription unless it is cancelled before the trial ends.

Complimentary access or special terms already granted to particular stores remain governed by the terms under which they were granted.

5.3 Price changes

The Client will be notified at least 30 days before any price change affecting an existing subscription takes effect. Any approval required by the billing flow will be obtained before the new price is applied. The Client may cancel their subscription as described in section 6.2.

6. DURATION AND TERMINATION

6.1 Duration

The subscription continues for an indefinite period and renews automatically each billing period under the terms approved by the Client, until cancelled.

6.2 Termination by the Client

The Client may stop using the application at any time, without cause or notice, by uninstalling it directly from their Shopify interface.

6.3 Termination by the Publisher

The Publisher reserves the right to suspend or terminate access to the application in the event of:

• Violation of these Terms of Sale
• Fraudulent or abusive use of the application
• Breach of the security or stability of the application
• Distribution of unlawful or immoral content

In the event of a serious breach, termination may be effective immediately, without notice.

6.4 Consequences of termination

Upon uninstallation of the application:

• Access to the application will be deactivated
• The store's application and community data is deleted when Shopify's deletion request following uninstallation is processed, as described in section 7.3 of the Privacy Policy
• After erasure, grouped monthly counters are retained for up to three years, as described in section 7.4; necessary billing documents follow a separate retention policy
• The Client should request an export of any data they wish to recover before uninstalling the application

7. CLIENT OBLIGATIONS

The Client agrees to:

• Provide accurate and up-to-date information upon registration
• Use the application in accordance with its intended purpose and applicable laws
• Not attempt to circumvent the application's security measures
• Not use the application to distribute unlawful, defamatory, hateful content or content that infringes on the rights of third parties
• Moderate content published by members of their community
• Respect the intellectual property rights of the Publisher
• Inform members of their community about the terms of use of the forum

8. PUBLISHER OBLIGATIONS

The Publisher agrees to:

• Provide a functional application that conforms to the description
• Ensure the availability of the application to the extent possible
• Implement the necessary measures to ensure data security
• Provide technical support to the Client
• Inform the Client of any scheduled maintenance likely to affect the use of the application

9. AVAILABILITY AND MAINTENANCE

9.1 Availability

The Publisher strives to ensure the availability of the application 24 hours a day, 7 days a week. However, the Publisher does not guarantee a specific uptime rate and shall not be held liable for service interruptions, whether scheduled or not.

9.2 Maintenance

The Publisher reserves the right to perform maintenance operations necessary for the proper functioning of the application. These operations may result in temporary unavailability of the service. The Publisher will endeavor to perform these operations during low-traffic hours and to inform the Client in advance whenever possible.

10. INTELLECTUAL PROPERTY

10.1 Publisher's rights

The Social Place application, its source code, its graphical interface, its documentation, and all elements that compose it are and remain the exclusive property of the Publisher. They are protected by intellectual property laws.

The subscription grants the Client a personal, non-exclusive, and non-transferable right to use the application within the scope of their legitimate business activities.

10.2 Client's rights over content

The Client retains all intellectual property rights over the content they publish or that members of their community publish through the application.

The Client grants the Publisher a license to use such content solely for the purpose of providing the service (storage, display, technical processing).

11. LIABILITY

11.1 Limitation of liability

The Publisher shall not be held liable for:

• Content published by the Client or members of their community
• Indirect damages resulting from the use or inability to use the application
• Data losses resulting from an action by the Client or a case of force majeure
• Malfunctions resulting from non-compliant use of the application
• Service interruptions beyond its control

11.2 Client's liability

The Client is solely responsible for:

• The use they make of the application
• Content published on their community forum
• The moderation of their community
• Compliance with the rights of third parties

The Client agrees to indemnify the Publisher against any claim, action, or proceeding resulting from a breach of their obligations.

12. FORCE MAJEURE

The Publisher shall not be held liable for the non-performance of its obligations in the event of force majeure, as defined by French case law, including but not limited to: natural disasters, wars, cyberattacks, telecommunications network failures, legislative or regulatory changes making the performance of the contract impossible.

13. TECHNICAL SUPPORT

The Publisher provides technical support via email (contact@socialplace.app) and chat for all plans.

Indicative response times are:

• For critical issues affecting usage: within 24 business hours
• For general inquiries: within 48 business hours

14. MODIFICATIONS TO THE TERMS OF SALE

The Publisher reserves the right to modify these Terms of Sale at any time. Modifications will be communicated to the Client by email and/or via the application interface at least 30 days before they take effect.

Continued use of the application after the modifications take effect constitutes acceptance of the new Terms of Sale. In the event of refusal, the Client may terminate their subscription in accordance with Article 6.2.

15. COMPLAINTS

Any complaint regarding the use of the application must be addressed to:

• Email: contact@socialplace.app

The Publisher undertakes to respond to any complaint as promptly as possible.

16. MEDIATION

In accordance with the provisions of Articles L.612-1 and following of the French Consumer Code, the consumer Client has the option to resort, free of charge, to a consumer mediator for the amicable resolution of a dispute with the Publisher.

17. APPLICABLE LAW AND JURISDICTION

These Terms of Sale are governed by French law.

In the event of a dispute, and failing amicable resolution, the French courts shall have sole jurisdiction.

PART 2: PRIVACY POLICY AND DATA MANAGEMENT

1. PREAMBLE

This Privacy Policy describes how Social Place (hereinafter "we", "our", or "the Publisher") collects, uses, stores, and protects the personal data of users of the Social Place application.

This policy applies to:

• Clients: Shopify merchants who install the application
• Members: end users who participate in forums created via the application

We attach particular importance to the protection of your personal data and are committed to complying with the General Data Protection Regulation (GDPR) as well as all applicable data protection regulations.

Data controller:

2. DATA COLLECTED

2.1 Data collected from Clients (Shopify Merchants)

During the installation and use of the application, we collect the following data:

Identification and account data:

• First name and last name
• Email address
• Shopify store name
• Shopify store URL
• Shopify account identifier
• Country and language

Trial and subscription data:

• Selected plan, dates and status of the trial or subscription
• Subscription and cancellation events, and billing information available through Shopify

Application usage data:

• Forum configuration settings
• Usage statistics (number of posts, active members, engagement)
• Moderation actions performed
• Login and activity logs

Store onboarding and retention data:

• Shopify domain and known installation, subscription, uninstallation and deletion dates
• Selected onboarding path, steps reached and recorded onboarding completion
• Categories needed for statistics, including test stores, migrations and complimentary access

When application data is deleted, selected indicators are added to the monthly counters described in section 7.4. No individual statistical profile is retained after this processing.

Technical data:

• IP address
• Browser type and version
• Operating system
• Navigation data in the administration interface

2.2 Data collected from Members (End users)

Members of forums created through our application are Shopify customers of our Clients. We collect:

Identification data:

• First name and last name (if provided by Shopify)
• Email (if accessible via the Shopify API)
• Shopify customer identifier
• Profile picture (optional)

Content data:

• Published posts
• Comments
• Reactions (likes, votes)
• Poll responses
• Uploaded images and files

Activity data:

• Date and time of publications
• Interaction history
• Engagement statistics

Technical data:

• IP address
• Type of device used
• Navigation data

2.3 Automatically collected data

Cookies and similar technologies:

We use cookies and similar technologies to:

• Maintain user sessions
• Improve the application's performance
• Analyze the use of the application
• Personalize the user experience

For more information, see our dedicated cookies section (Article 9).

3. PURPOSES AND LEGAL BASIS OF PROCESSING

3.1 For Clients

3.2 For Members

4. DATA RECIPIENTS

4.1 Internal access

Data is accessible to:

• Social Place technical teams for maintenance and support
• Development teams for service improvement
• Management for performance analysis

All our employees and collaborators are bound by a confidentiality obligation.

4.2 Subcontractors and partners

We engage subcontractors for the provision of certain services:

Hosting and infrastructure:

• Data hosting on servers located within the European Union
• Our hosting providers comply with GDPR security standards

Shopify platform:

• The application integrates with Shopify and accesses data via the Shopify API
• Shopify is GDPR compliant and holds security certifications

Analytics and monitoring tools:

• We use analytics tools to monitor the performance and usage of the application
• These tools may collect anonymized technical data

4.3 Transfers outside the EU

We do not transfer personal data outside the European Union, unless:

• It is necessary for the provision of the service (e.g., if the Client uses Shopify with servers outside the EU)
• Appropriate safeguards are in place (standard contractual clauses of the European Commission)

5. RIGHTS OF DATA SUBJECTS

In accordance with the GDPR, you have the following rights:

5.1 Right of access

You may obtain:

• Confirmation that your data is being processed
• A copy of your personal data
• Information about the processing carried out

5.2 Right to rectification

You may request the correction of inaccurate or incomplete data.

5.3 Right to erasure ("right to be forgotten")

You may request the deletion of your data in certain cases:

• The data is no longer necessary
• You withdraw your consent
• You object to the processing
• The data has been unlawfully processed

5.4 Right to restriction of processing

You may request restriction of processing in certain cases:

• You contest the accuracy of the data
• The processing is unlawful but you do not wish for erasure
• The data is needed for a claim

5.5 Right to data portability

You may receive your data in a structured, commonly used, and machine-readable format, and request its transmission to another data controller.

5.6 Right to object

You may object to the processing of your data for reasons relating to your particular situation.

To exercise your rights over personal data still held, contact contact@socialplace.app and include your store domain. We assess requests under the conditions set out in the GDPR. Grouped counters contain no key that can retrieve an individual store’s contribution.

5.7 Right to withdraw consent

Where processing is based on consent, you may withdraw it at any time.

5.8 Right to define post-mortem directives

You may define directives regarding the fate of your data after your death.

5.9 Exercising your rights

To exercise your rights, you may:

• For Clients: contact us directly at contact@socialplace.app
• For Members: contact the merchant who owns the forum OR contact us at contact@socialplace.app

We will respond within a maximum period of one month. This period may be extended by two months if the request is complex.

You may also file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés): www.cnil.fr

6. DATA SECURITY

We implement appropriate technical and organizational measures to protect your personal data against:

• Unauthorized access
• Accidental loss
• Alteration
• Disclosure
• Destruction

6.1 Technical measures

• Encryption: Sensitive data is encrypted in transit (HTTPS/TLS) and at rest
• Authentication: Secure access via Shopify OAuth authentication
• Firewall: Protection by firewall and intrusion detection systems
• Backups: Regular and automatic data backups
• Updates: Regular updates of systems and software

6.2 Organizational measures

• Data access limited to strictly necessary personnel
• Staff training on data protection
• Security incident management procedures
• Regular security audits
• Subcontracting agreements compliant with the GDPR

6.3 Breach notification

In the event of a data breach likely to result in a high risk to your rights and freedoms, we will notify you within 72 hours of discovering the breach, in accordance with the GDPR.

7. DATA RETENTION

7.1 Retention periods for Clients

• Account data and store settings: During application use, followed by deletion as described in section 7.3
• Grouped monthly statistical counters: up to 36 months from the start of the relevant month, under section 7.4
• Support data: 1 year after ticket resolution
• Technical logs: 6 months
• Marketing data: Until withdrawal of consent + 3 years

7.2 Retention periods for Members

• Profile data: As long as the forum exists or until a deletion request is made
• Published content (posts, comments): As long as the forum exists, unless deleted by the member or through moderation
• Activity data: Data anonymized after 2 years
• Login logs: 6 months

7.3 Deletion upon uninstallation

When a Client uninstalls the application:

• Application access is disabled and access sessions are deleted
• Shopify normally sends a deletion request 48 hours after uninstallation. Processing it deletes the store's configuration profile and the community data stored in the application: member profiles, posts, comments, messages and associated generation data
• The temporary snapshot used to prepare statistics is erased with application data. Erasure takes place no later than 30 days after uninstallation, subject to applicable legal obligations
• To recover their data, the Client must request an export before uninstalling the application

7.4 Grouped statistics after uninstallation

To understand abandonment and improve the service, stores whose data is erased contribute to monthly totals: number of stores, subscriptions started (including trials), completed onboarding, broad plan categories and time before departure (under 7 days, 7–29 days, 30–89 days, or 90 days and over). A subscription does not prove that payment was collected. Identified test and review stores and complimentary access are excluded.

Installation and departure months are counted separately. When a departure date is unavailable, the erasure month is used. These statistics cover erased stores only and do not, on their own, represent the churn rate of the entire customer base.

These counters contain no store domain, individual identifier or hash, exact date, name, email, community content, free-text comment or access token. They retain no link to an individual store profile. Distributions are not cross-tabulated. Small groups and complements that could reveal them are suppressed in dashboard analyses.

Counters are retained for up to 36 months from the start of the relevant month. At expiry, they are excluded from analytics and removed during daily cleanup. This duration is a service minimisation choice, not a legal retention obligation. They are used only for internal service analysis, without marketing follow-ups based on a former store profile.

Removing identifiers and grouping data reduces reidentification risks; these measures alone do not guarantee irreversible anonymity. Access is restricted to authorised personnel and risks of linking the statistics with other information must be reassessed.

7.5 Billing documents and other separate retention

Only documents necessary to comply with a legal obligation may justify separate retention after erasure, for the applicable period. This exception does not authorise retaining every subscription record or rebuilding an analytics profile for each store. Other data still held, including support records or technical logs, remains subject to applicable erasure requirements and the rights described in section 5.

8. SPECIFIC CLIENT RIGHTS REGARDING MEMBER DATA

8.1 The Client as data controller

The Client (Shopify merchant) is the data controller for the data of the members of their community. As such, the Client must:

• Inform members about the collection and processing of their data
• Obtain necessary consents where applicable
• Respect the rights of members (access, rectification, deletion, etc.)
• Implement a privacy policy for their store

8.2 Social Place as data processor

For member data, Social Place acts as data processor on behalf of the Client. We process this data only on the Client's instructions and within the scope of providing the service.

8.3 Data processing agreement

A data processing agreement compliant with Article 28 of the GDPR governs our relationship with the Client regarding the processing of member data. This agreement provides for, among other things:

• The obligations of the data processor
• Security measures
• Assistance to the Client in complying with their obligations
• The fate of data at the end of the contract

9. COOKIES AND SIMILAR TECHNOLOGIES

9.1 Types of cookies used

Strictly necessary cookies:

• Authentication and session maintenance
• Security and fraud prevention
• Language preferences

These cookies do not require consent as they are essential for the operation of the service.

Performance cookies:

• Analysis of application usage
• Traffic statistics
• Engagement measurement

These cookies require your consent.

Functionality cookies:

• Remembering display preferences
• Interface personalization

These cookies require your consent.

9.2 Cookie retention period

• Session cookies: Deleted when the browser is closed
• Persistent cookies: 12 months maximum

9.3 Cookie management

You can manage your cookie preferences:

• Via the consent banner on your first visit
• Via your browser settings
• By contacting our support

Refusing certain cookies may limit the functionality of the application.

10. MINORS' DATA

Our service is not intended for persons under 16 years of age. We do not knowingly collect personal data from minors under 16 without the consent of the holders of parental authority.

If you are a parent or legal guardian and believe that your child has provided us with personal data, contact us at contact@socialplace.app so that we can take appropriate measures.

11. MODIFICATIONS TO THE PRIVACY POLICY

We reserve the right to modify this Privacy Policy at any time to reflect:

• Changes in our practices
• Legal or regulatory developments
• New features

In the event of a substantial modification, we will notify you by email and/or via the application interface at least 30 days before the changes take effect.

Continued use of the application after the modifications take effect constitutes acceptance of the new policy.

12. LINKS TO THIRD-PARTY SITES

Our application may contain links to third-party websites (including Shopify). We are not responsible for the privacy practices of these sites. We encourage you to read the privacy policies of these sites when you visit them.

13. DATA PROTECTION IMPACT ASSESSMENT (DPIA)

In accordance with the GDPR, we have conducted a Data Protection Impact Assessment (DPIA) to identify and minimize the risks associated with the processing of personal data.

14. DATA PROTECTION OFFICER (DPO)

For any questions regarding the protection of your personal data, you can contact our dedicated team at:

• Email: contact@socialplace.app
• Subject: "Personal data protection - GDPR"

15. CONTACT

For any questions, requests for information, or to exercise your rights regarding this Privacy Policy:

We are committed to responding as promptly as possible and no later than one month from the receipt of your request.

These General Terms of Sale and Privacy Policy were last updated on September 15, 2026.

By using the Social Place application, you acknowledge that you have read and understood these terms and you agree to the collection, use, and sharing of your information in accordance with them.

For any questions regarding these Terms of Sale and this Privacy Policy, please contact us at: contact@socialplace.app