The legal documents are updated after legal review

The terms of service are updated and stay a draft. Their version date is now 2026-10-15, in English and French, and the draft banner stays until legal's final sign-off.

• Personal data (section 7). Our data processing terms are the contract article 28 of the GDPR requires and form part of the terms, even with no separate written agreement. They will be published online; their address is not set yet and the page shows a placeholder until it is. Accepting the terms authorises the sub-processors on our list.
• Liability (section 9). The €5,000 cap now applies to either party, for all causes combined and for the whole term. It does not apply to bodily injury, gross negligence or wilful misconduct, or where the law forbids a limit. A force majeure clause is added.
• Your data (section 6). We use your data only to provide the service to you, unless you instruct us otherwise in writing. Derived material that holds your data or personal data is deleted with your data; only anonymised, aggregated statistics can be kept.
• Your shoppers (section 5). You stay responsible for informing your shoppers about your own processing, its legal basis, and any cookie consent on your website, and should refer to our shopper notice in your own privacy policy. The no-training commitment now reads: providers do not train on your content and, where the provider offers it, keep no content after the call. Today every call runs with zero data retention.
• Changes (section 11). A material change is announced by email to your organisation's administrators at least 30 days before it takes effect.
• Also new. Your own purchasing conditions do not apply, a survival clause lists what continues after the end, and a closing paragraph links the related documents. The service is now provided "without warranties", and after the three-month retrieval period your data is deleted, with no option to have it returned.

The privacy policy is approved. Version 2026-10-15, in English and French, now without the draft banner. iAdvize is the controller for your visit, your account, your sign-in, security, the change record, product emails and the feedback you send from the dashboard. Playground tests, the pages of your site and page-view counts are now described in a separate section, "What we process on behalf of your company", where your company is the controller and iAdvize its processor. Dashboard feedback relies on our legitimate interest and is kept two years after it is sent. The record of which terms your organisation accepted is kept five years after the organisation is closed. The summary at the top and the "After your death" and "Who the service is for" sections are removed.

The sub-processor list is updated. It stays approved, at version 2026-10-15. It now points to the privacy policy for providers that also process data iAdvize controls. A new provider can start with less than 30 days' notice only for security or legal reasons, no longer operational ones. The Linkup row says that, for a page of your site, Linkup returns the page's public content. We connect your Shopify store's public endpoints on your instruction.

The shopper notice leaves the legal basis to your store. In all six languages, the notice now says your store determines the legal basis for this processing and states it in its own privacy policy, with legitimate interest as the default. The performance measurement is described as sent with no cookie and no identifier, instead of as "anonymous".