1. Home
  2. Security

Security, data protection and AI transparency.

We act as your data processor under a Data Processing Agreement, with systems hosted in the EU (Germany). Every conversation discloses that it's AI, customers can reach a human at any time, and you can switch to human-only with one click.

Data protection

How we handle your store's data.

Role
We are your data processor under a Data Processing Agreement; you remain the controller of your shoppers' data.
Hosting
Systems are hosted in the EU (Germany).
Transfers
We're based in Taiwan. Where data is accessed from outside the EU, the EU Standard Contractual Clauses apply.
Store access
We request only the Shopify permissions we need, and access is logged.
Security measures
Encryption in transit (TLS) and at rest, least-privilege access, multi-factor authentication on admin accounts, and scoped API tokens for store access.
AI training
We do not use your data or your customers' data to train AI models. We use AI providers through their business APIs, which do not train on API data by default.
Deletion
Data is deleted when the contract ends. Sample tickets sent for the free audit are deleted within 30 days.
Subprocessors
Our current subprocessor list is available on request at hello@getdawnline.com.
AI transparency & control

Disclosed as AI. A human is always one step away.

Every conversation opens with a clear AI disclosure, in line with the transparency obligations of Article 50 of the EU AI Act (applicable from 2 August 2026). Included in every plan:

Shadow mode first

The AI drafts, you approve. It only goes live once you're happy with the test results.

One-click human-only

Switch your channels back to human-only at any time, with a single click.

Human handoff

Customers can ask for a person at any time. Every conversation opens with a clear AI disclosure.

DPA & EU hosting

We act as your processor under a Data Processing Agreement, with systems hosted in the EU (Germany).

The AI never decides refunds

Refunds, compensation, and account actions are always carried out by your team. The AI never promises refunds or compensation, and hands sensitive cases over with a summary.

Documents

Read the details.

Data Processing Agreement →

Being finalized. Contact hello@getdawnline.com for a copy.

Privacy Policy →

Being finalized. Contact hello@getdawnline.com for a copy.

Terms of Service →

Being finalized. Contact hello@getdawnline.com for a copy.