Privacy Policy — EU Compliance Kit for Wix
Effective date: 21 October 2026
Publisher: Universal Exporters LLC, 10006 Rolke Rd, Houston, TX 77099, United States
Contact: support+eucompliance-wix@justarobot.online
EU Compliance Kit for Wix ("the app") is a Wix app that tracks your catalogue prices to display the Omnibus reference price, and helps you show EU product information on your product pages: GPSR product-safety details, the withdrawal button, guarantee and disposal notices, the GARAN label, delivery times, food information and digital product passports. It also checks your product texts for environmental claims ("green claims"). This policy explains what data the app handles when you install it on your Wix site, and why.
The short version: the app stores no personal data about your customers or visitors on our servers. It stores an identifier for your site, your site's URL, your product prices over time, and your settings. Your GPSR records, product passports, green-claims findings, and any withdrawal declarations your customers submit through the app's withdrawal button, live in your own site's database, not ours. To check green claims our server reads your product texts, but it does not store them. Everything we hold is deleted 48 hours after you uninstall, except a record of your site address and the install and uninstall dates, which we keep for up to 3 years.
1. Who we are and our role
Universal Exporters LLC ("we") publishes the app and is the controller for the account data described in §2(a).
For any data the app reads from your site on your instructions (§2(b)), you are the controller and we are your processor under Art. 28 GDPR. We process that data only to provide the app's functions, as described here, and on no other instructions.
2. What we collect and why
(a) Account data (we are controller)
| Data | Source | Purpose | Legal basis |
|---|---|---|---|
| App instance ID (the identifier Wix assigns to your installation) | Wix, at install | Identify your site; all other data is keyed to it | Contract (Art. 6(1)(b)) |
| Site URL, catalog version, store currency | Wix, at install and on each run | Read the right catalog and show prices correctly | Contract |
| Plan status (free or Pro, trial dates) | Wix, at install and on plan changes | Enable the features you pay for | Contract |
| Support correspondence, including problem reports sent from the app (site name, site ID, the site owner's e-mail, the area, the error shown, your note) | You | Answer your questions | Contract / legitimate interest |
| Install record: app instance ID, site URL, install and uninstall dates | Wix, at install and uninstall | Count our installs and uninstalls as a business record | Legitimate interest (Art. 6(1)(f)) |
| Wix user ID of the person who switches on the sale-price email (Omnibus prices → Settings → Email alerts), and which problems were already emailed | You, in the dashboard | Send that email — only when a sale shown with a crossed-out price is not below its 30-day low. Off until switched on | Contract |
We do not store a password or an access token for your site. Each request to Wix is authorised with a short-lived token that Wix issues for your installation and that we discard after use.
(b) Site data processed on your behalf (you are controller)
| Data | Why the app needs it |
|---|---|
| Product and variant IDs, names, prices and compare-at prices, per currency | To compute the lowest price of the prior 30 days (or your configured reference period) — the Omnibus reference price |
| Your site's published languages | To know which languages the safety statements should cover |
| Your Omnibus settings and product exemptions | To apply your configuration |
| Product texts: name, description, additional-info sections, ribbon, SEO title and SEO description, per language | To check them for environmental claims (green claims). Read when you run a scan, when a product changes, and once a night on Pro; held in memory during the check only, never stored on our servers. The findings go into your own site |
| Product passport data you enter (identifiers such as the GTIN, manufacturer and Responsible Person, materials, documents) | To build the passport page, QR codes and exports — stored only in your own Wix site |
| Your settings and entries for the other product-page features (GARAN labels, delivery times, food information, battery and e-waste switches, green-claims findings, evidence, accepted phrases) | To show them on your product pages — stored only in your own Wix site |
| Withdrawal declarations (customer's name, e-mail address, order reference, optional details, date and time) | To provide the withdrawal function required by Art. 11a of the Consumer Rights Directive and let you acknowledge each declaration — stored only in your own Wix site, never sent to our servers |
Where it lives. Price observations and the computed reference prices are stored on our servers. The reference prices, the price history shown in the dashboard, and the app's plan flag are also written to data collections inside your own Wix site, so that your product pages read them directly from Wix and never call our servers. GPSR manufacturer and Responsible Person details, product passports, food information, GARAN labels, delivery times, disposal-notice switches and green-claims findings, evidence and accepted phrases are stored only in your own Wix site, never in our database; if those details identify a natural person (a sole trader, for instance), you are the controller of that record and Wix's terms govern its storage. A product passport is published on a public page of your site (that is its purpose), so whatever you enter in it is publicly visible. For the green-claims check our server reads the product texts listed above from your site, checks them in memory and writes only the findings (the phrase found, a short surrounding excerpt, the rule and its status) back into your site; the texts themselves are not kept on our servers.
What we do not collect. The app requests no access to customers, orders, checkout, addresses, payment data, or analytics, and stores none. Withdrawal declarations submitted through the withdrawal button are written by the visitor directly into a data collection in your Wix site; you are their controller, Wix's terms govern their storage, and our servers neither receive nor read them. The app reads the site owner's email only when Wix includes it in the installation record, to identify the site; we do not use it for marketing. The optional sale-price email is sent by Wix's own email service to the Wix user who switched it on: we pass Wix that user's ID, the subject and the list of affected products, never an email address. The user ID and the list of sales not below their 30-day low are kept in your own site's settings collection. A problem report sent with "Report a problem" goes as one e-mail to our support inbox, delivered by Resend, Inc. (USA).
Technical logs. Our hosting provider records request metadata (IP address, timestamp, path) for security and debugging; retained 30 days.
3. How long we keep it
| Data | Retained |
|---|---|
| Price observations | 400 days from the observation, then pruned automatically |
| Computed reference prices, settings, exemptions | While the app is installed |
| Sale-price email recipient (Wix user ID) | Until the email is switched off or the app is removed |
| App instance ID, site URL, plan status | While the app is installed |
| Everything above | Deleted 48 hours after uninstall, when Wix sends the app-removed notice |
| Install record (app instance ID, site URL, install and uninstall dates) | 3 years after uninstall, then deleted automatically. For sites that installed before 29 September 2026 we keep only the instance ID and the dates, not the site URL |
| Data in your own site's collections | Remains in your site; Wix removes the app's collections when the app is removed |
| Support correspondence | 2 years |
4. Who else sees it (sub-processors)
| Provider | What | Where |
|---|---|---|
| Wix.com Ltd. | Platform, authentication, billing, and sending the optional sale-price email. Wix never sends us card data. | Per Wix's policy |
| Railway Corp. | Application hosting and primary database | European Union (Amsterdam) |
| Cloudflare, Inc. (R2) | Continuous encrypted database replica for disaster recovery | European Union (R2 EU jurisdiction) |
| Resend, Inc. | Delivers problem reports sent from the app to our support inbox | United States |
The app and its database run in the European Union (Netherlands). Wix itself processes data under its own transfer arrangements.
We do not sell data, share it with advertisers, or use it to train models.
5. Security
Data in transit is TLS-encrypted. Tokens for your site are issued by Wix per request, held in memory on our server only, and never exposed to the browser or the storefront. The product-page plugins and the passport page read only the reference price, plan flag and product information stored in your own site's collections — the app's server is not in the path of a shopper's page load. The database replica is encrypted at rest by the provider.
6. Your rights
If you are a site owner or collaborator, you may ask us to access, correct, export, or delete the account data in §2(a) at support+eucompliance-wix@justarobot.online. We answer within 30 days. You may lodge a complaint with your supervisory authority.
Uninstalling the app triggers deletion of every record keyed to your site within 48 hours, except the install record in §3; you can ask us to delete any of it sooner, the install record included. We hold no customer or visitor data, so there is nothing to report or redact for your customers.
7. Cookies
The app's dashboard pages run inside the Wix dashboard and set no cookies of their own. The product-page plugins set no cookies and do no tracking.
8. Changes
We will post changes here with a new effective date and, for material changes, notify the site owner email on file before they take effect.
9. Contact
Universal Exporters LLC · 10006 Rolke Rd, Houston, TX 77099, United States · support+eucompliance-wix@justarobot.online
Changelog: 8 September 2026 — first version, for the Wix App Market listing. 29 September 2026 — an install record (app instance ID, site URL, install and uninstall dates) is kept for 3 years after uninstall (§2(a), §3, §6); for sites installed before this date, without the site URL. 15 October 2026 — the policy now names every feature (§ intro); green claims: product texts are read and checked in memory, findings stored only in your site (§2(b)); product passports, food information, GARAN, delivery times, disposal notices and green-claims records listed as stored only in your site, passport pages are public (§2(b), §5).