Privacy Policy — EU Compliance Kit for Wix
Effective date: 8 September 2026
Publisher: Universal Exporters LLC, 10006 Rolke Rd, Houston, TX 77099, United States
Contact: support+eucompliance@justarobot.online
EU Compliance Kit for Wix ("the app") is a Wix app that tracks your catalogue prices to display the Omnibus reference price, and helps you publish GPSR product-safety information on your product pages. This policy explains what data the app handles when you install it on your Wix site, and why.
The short version: the app stores no personal data about your customers or visitors on our servers. It stores an identifier for your site, your site's URL, your product prices over time, and your settings. Your GPSR records, and any withdrawal declarations your customers submit through the app's withdrawal button, live in your own site's database, not ours. Everything we hold is deleted 48 hours after you uninstall.
1. Who we are and our role
Universal Exporters LLC ("we") publishes the app and is the controller for the account data described in §2(a).
For any data the app reads from your site on your instructions (§2(b)), you are the controller and we are your processor under Art. 28 GDPR. We process that data only to provide the app's functions, as described here, and on no other instructions.
2. What we collect and why
(a) Account data (we are controller)
| Data | Source | Purpose | Legal basis |
|---|---|---|---|
| App instance ID (the identifier Wix assigns to your installation) | Wix, at install | Identify your site; all other data is keyed to it | Contract (Art. 6(1)(b)) |
| Site URL, catalog version, store currency | Wix, at install and on each run | Read the right catalog and show prices correctly | Contract |
| Plan status (free or Pro, trial dates) | Wix, at install and on plan changes | Enable the features you pay for | Contract |
| Support correspondence | You | Answer your questions | Contract / legitimate interest |
We do not store a password or an access token for your site. Each request to Wix is authorised with a short-lived token that Wix issues for your installation and that we discard after use.
(b) Site data processed on your behalf (you are controller)
| Data | Why the app needs it |
|---|---|
| Product and variant IDs, names, prices and compare-at prices, per currency | To compute the lowest price of the prior 30 days (or your configured reference period) — the Omnibus reference price |
| Your site's published languages | To know which languages the safety statements should cover |
| Your Omnibus settings and product exemptions | To apply your configuration |
| Withdrawal declarations (customer's name, e-mail address, order reference, optional details, date and time) | To provide the withdrawal function required by Art. 11a of the Consumer Rights Directive and let you acknowledge each declaration — stored only in your own Wix site, never sent to our servers |
Where it lives. Price observations and the computed reference prices are stored on our servers. The reference prices, the price history shown in the dashboard, and the app's plan flag are also written to data collections inside your own Wix site, so that your product pages read them directly from Wix and never call our servers. GPSR manufacturer and Responsible Person details you enter are stored only in your own Wix site, never in our database; if those details identify a natural person (a sole trader, for instance), you are the controller of that record and Wix's terms govern its storage.
What we do not collect. The app requests no access to customers, orders, checkout, addresses, payment data, or analytics, and stores none. Withdrawal declarations submitted through the withdrawal button are written by the visitor directly into a data collection in your Wix site; you are their controller, Wix's terms govern their storage, and our servers neither receive nor read them. The app reads the site owner's email only when Wix includes it in the installation record, to identify the site; we do not use it for marketing.
Technical logs. Our hosting provider records request metadata (IP address, timestamp, path) for security and debugging; retained 30 days.
3. How long we keep it
| Data | Retained |
|---|---|
| Price observations | 400 days from the observation, then pruned automatically |
| Computed reference prices, settings, exemptions | While the app is installed |
| App instance ID, site URL, plan status | While the app is installed |
| Everything above | Deleted 48 hours after uninstall, when Wix sends the app-removed notice |
| Data in your own site's collections | Remains in your site; Wix removes the app's collections when the app is removed |
| Support correspondence | 2 years |
4. Who else sees it (sub-processors)
| Provider | What | Where |
|---|---|---|
| Wix.com Ltd. | Platform, authentication, billing. Wix never sends us card data. | Per Wix's policy |
| Railway Corp. | Application hosting and primary database | European Union (Amsterdam) |
| Cloudflare, Inc. (R2) | Continuous encrypted database replica for disaster recovery | European Union (R2 EU jurisdiction) |
The app and its database run in the European Union (Netherlands). Wix itself processes data under its own transfer arrangements.
We do not sell data, share it with advertisers, or use it to train models.
5. Security
Data in transit is TLS-encrypted. Tokens for your site are issued by Wix per request, held in memory on our server only, and never exposed to the browser or the storefront. The product-page plugins read only the reference price, plan flag and safety fields stored in your own site's collections — the app's server is not in the path of a shopper's page load. The database replica is encrypted at rest by the provider.
6. Your rights
If you are a site owner or collaborator, you may ask us to access, correct, export, or delete the account data in §2(a) at support+eucompliance@justarobot.online. We answer within 30 days. You may lodge a complaint with your supervisory authority.
Uninstalling the app triggers deletion of every record keyed to your site within 48 hours; you can also ask us to delete it sooner. We hold no customer or visitor data, so there is nothing to report or redact for your customers.
7. Cookies
The app's dashboard pages run inside the Wix dashboard and set no cookies of their own. The product-page plugins set no cookies and do no tracking.
8. Changes
We will post changes here with a new effective date and, for material changes, notify the site owner email on file before they take effect.
9. Contact
Universal Exporters LLC · 10006 Rolke Rd, Houston, TX 77099, United States · support+eucompliance@justarobot.online
Changelog: 8 September 2026 — first version, for the Wix App Market listing.