SHOPIFY APP ADDENDUM TO THE Yasan TERMS OF SERVICE

Effective Date: 19 October 2026 · Last Updated: 19 October 2026 · Version 1.1

This Addendum applies when you install the Yasan app from the Shopify App Store or otherwise connect a Shopify store to the Yasan service. It supplements the Yasan Terms of Service (https://yasan.ai/terms, the “Terms”), the Data Processing Agreement (https://yasan.ai/dpa) and the Privacy Policy (https://yasan.ai/privacy). Capitalised terms have the meaning given in the Terms. In case of conflict, this Addendum prevails for Shopify-specific matters.

1. Shopify is not a party. The app is developed and provided by Let’s Whisper s.r.o. (Yasan). Shopify Inc. and its affiliates (“Shopify”) are not a party to the Terms, are not responsible for the app, provide no support or warranty for it, and have no liability to you in connection with it. Your use of Shopify remains governed by Shopify’s own terms. Yasan’s use of the Shopify platform is governed by the Shopify Partner Program Agreement and the Shopify API Terms, and Yasan may be required by Shopify to modify, suspend or remove the app, which it may do without liability to you.

2. Data accessed from your store. When you install the app you grant it the access scopes shown by Shopify at installation. Through the Shopify API, Yasan processes: your product catalogue (titles, descriptions, variants, prices, stock, images, translations); orders and their line items, fulfilment and financial status, and the customer on those orders (name, e-mail, phone number, billing and shipping address); the published theme’s settings (to check whether the widget is enabled); and your store’s languages and markets (so answers use the right language and currency); plus consent signals from the Shopify Customer Privacy API. Orders — including the customer’s contact details on them — are read on demand to answer a specific question or perform an action you have allowed (such as a shipping-address or phone-number change); we do not keep a copy of your customer list. All of this is used solely to provide the Features you enable, in accordance with the Terms and the DPA, and in compliance with Shopify’s protected-customer-data requirements.

Retention. Chat and search conversations and analytics records are removed no later than 24 months after creation. E-mail support history is kept for the life of your subscription (so your agents keep past conversations) and deleted earlier on request. Order and customer data is cached only transiently. Your Shopify access token is erased immediately on uninstall. All remaining data of your store is deleted within 30 days after your subscription ends, subject to backups overwritten in the ordinary cycle.

AI providers and sub-processors. Answers are generated with AI models from Google, OpenAI and — as fallback — Anthropic (run via Amazon Web Services); the relevance of search results is assessed by TypeSafe AI (USA) under a zero-data-retention arrangement and without any identifier of your store, the shopper or the session. None of these providers may use your data to train their models. The complete list of sub-processors with locations and transfer mechanisms is published at https://yasan.ai/subprocessors; additions are announced at least 7 days in advance by e-mail from [email protected] to your account address, and you may object as set out in Section 5 of the DPA.

3. Compliance webhooks. Yasan implements Shopify’s mandatory privacy webhooks. When Shopify sends customers/data_request, customers/redact or shop/redact, we log the request with a 30-day deadline and, within that period, either provide you with an export of the personal data we hold about the person (so you can respond to them) or permanently remove their personal data from our systems — including message bodies, attachments and derived embeddings — or, for shop/redact (sent by Shopify 48 hours after uninstall), all data of your store; in each case subject to backups overwritten in the ordinary cycle and to legal retention duties.

4. Billing. Fees are charged as shown in the app listing and at https://yasan.ai/pricing, either through Shopify Billing (in which case Shopify’s billing terms govern the payment mechanics and refunds are handled according to Shopify’s rules) or directly by Yasan through Stripe, as indicated at subscription. Where billing runs through Shopify Billing, uninstalling the app ends the subscription in accordance with Shopify’s rules. Where billing is direct (Stripe), uninstalling the app does not cancel the subscription; cancel it in the Yasan app or by e-mail to [email protected]. Prices shown exclude VAT and other taxes. A free trial, where offered, converts to a paid Plan only when you actively subscribe (Section 3.6 of the Terms).

5. Storefront code and theme. The app adds a theme app extension / script to your Online Store to render the chat and search assistant. You are responsible for your theme’s compatibility; Yasan does not warrant compatibility with every theme or third-party app. You shall not modify the extension to remove the AI disclosure, the privacy link or the “Powered by Yasan” notice.

6. Customer privacy and consent. You are the controller of your customers’ data. You must (a) include the paragraph from the Yasan Compliance Kit in your store’s privacy policy and link to https://yasan.ai/ai-assistant-privacy; (b) use a consent app compatible with the Shopify Customer Privacy API if your customers are in the EU/EEA, the UK or another jurisdiction requiring consent for analytics identifiers — Yasan honours the Shopify consent signal and will not create a visitor identifier without it; (c) comply with all laws applicable to your store, including the AI-disclosure duty under the EU AI Act for EU customers; (d) keep the AI disclosure, the privacy link and the “Powered by Yasan” notice visible and not instruct the assistant to claim to be human (Section 7.5 of the Terms); (e) not deploy the assistant on a store aimed at children below the age of digital consent — the assistant does not verify age — and configure it yourself for any age-restricted or regulated products you sell (Sections 4.1(d) and 4.4(h) of the Terms); (f) keep cross-visit history switched off unless your store has a lawful basis for it (Section 7.4 of the Terms).

7. Shopify checkout and Shopify Inbox. The app does not modify checkout and is not affiliated with Shopify Inbox or Shopify Magic. Where Yasan executes actions in your store (e.g. order edits, refunds, customer notes) under the Email Agent, it does so under the permissions you granted and on your configuration; such actions are deemed yours.

8. Uninstalling. You may uninstall at any time from the Shopify admin. Uninstalling removes the storefront code and triggers the shop/redact process described above. Export any conversations or reports you need before uninstalling.

9. Support. Support is provided by Yasan at [email protected] and in-app chat on business days (CET). Shopify does not provide support for the app.

10. Governing law. The Terms’ governing-law and jurisdiction provisions (Czech law, Czech courts) apply to this Addendum.

11. Changes and previous versions. Yasan may amend this Addendum as set out in Section 14 of the Terms (at least 15 days’ notice by e-mail, in-app message or Shopify notification, except for changes required by Shopify or by law, or changes in your favour or purely editorial, which take effect immediately). Previous versions are available at https://yasan.ai/legal/archive.