Draft before legal review. Dated 17 October 2026, not yet in effect. webinstudio has not had this text reviewed by a lawyer; it is published so that merchants and reviewers can read what we intend to agree to.
These Terms of Service (the "Terms") are an agreement between webinstudio (웹인스튜디오), a sole proprietorship registered in the Republic of Korea (business registration 145-65-00656, 404-1301, 151 Wolsan-ro, Gimhae-si, Gyeongsangnam-do 50990, "we", "us"), and the merchant that installs or uses Webin Order Exceptions (the "App", and "you"). By installing or using the App you agree to these Terms and to the Data Processing Addendum in Part B.
Part A. Terms of Service
1. The App
The App turns shipping problems on your Shopify or WooCommerce orders (lost, damaged, delayed, delivered but not received, returned to sender) into cases with deadlines and an evidence checklist. From a case your team can refund the order, send a replacement, prepare a claim packet and close the case once a verifying event has arrived. What the App does with data is described in our Privacy Policy, which is part of these Terms.
The App is provided by webinstudio, not by Shopify. In line with Shopify's API License and Terms of Use:
- webinstudio is solely responsible for the App, including its development, marketing, distribution and support, and for the processing of your data in the App.
- Shopify is not liable for any fault in the App or for any harm that may result from installing or using it.
- Shopify does not provide support for installing or using the App unless Shopify states otherwise. Support for the App is provided by webinstudio (see Support).
- webinstudio is solely responsible for any liability which may arise from your access to or use of the App.
- The protections these Terms give to data that comes from Shopify are at least as protective as Shopify's API License and Terms of Use. Where that document imposes a stricter duty on us than these Terms do, the stricter duty applies.
2. Who may use the App
The App is for businesses. You confirm that you operate the store you connect, that you are allowed to bind that business to these Terms, and that the staff you give access to act for that business. You are responsible for what your staff do in the App.
3. Your account and your staff
On Shopify, your workspace is created when the App is first opened from your Shopify admin, and the first staff member with access to all the App's permissions becomes the owner. On WooCommerce, you create the workspace and sign in with an email address and password. Keep sign-in credentials, API tokens and connector keys confidential and tell us at once if you suspect misuse. The owner decides which staff have the owner, agent and viewer roles and what agents may refund without an owner.
4. Fees
For Shopify stores, fees are charged through Shopify's app billing under the plan you choose on the Shopify plan page. Each plan starts with a 14-day free trial. The monthly price, the number of tracked shipments included in each monthly billing cycle and the charge for each additional tracked shipment are stated on the plan page and on our App Store listing when you subscribe. A tracked shipment is one tracking number the App starts tracking during a billing cycle; later events for the same number are not counted again. Usage above the included amount is added to your Shopify bill monthly. If you do not have an active subscription, the App keeps receiving your store's events and tracking updates but does not let your team take actions until a plan is chosen.
Carrier tracking data comes from your own EasyPost account, which EasyPost bills under your agreement with EasyPost. Those charges are not part of our fees.
For WooCommerce stores, fees, if any, are agreed with you in writing before you connect.
5. Your responsibilities
- You use the App to handle your own orders and shipments. You do not use it to process data you have no right to process, to send unlawful or misleading messages, or to interfere with the App or other merchants' workspaces.
- Refunds, replacements, order notes, claim packets and customer-facing messages are started by your staff and are your decisions. The App carries them out and records them; it does not decide them.
- Claims to carriers and insurers are filed by you. The App prepares a packet and links to the carrier's claim portal. It does not file claims and does not guarantee any claim outcome or deadline. Carrier deadlines shown in the App are taken from your settings and the carrier information available to the App, and you should check them against the carrier's current rules.
- You are responsible for the settings you choose, including SLA targets, policies, retention periods, agent refund limits, webhook endpoints and API tokens.
- You hold the rights and consents you need for the information you put into the App, including customer messages your staff link to cases.
6. Communications with your customers
The App does not send email or SMS to your customers in this version. It stores replies and notices your team writes on the case and shows them on the case status page that your team may share with the customer. When your staff issue a Shopify refund, the App asks Shopify to send Shopify's standard refund notification. You consent to the App preparing and displaying these communications on your behalf. We do not otherwise contact your customers, directly or indirectly, except where a customer contacts us and we pass the request to you.
7. Data
Part B of these Terms sets out how we process personal information on your behalf. In short: your customers' data in the App is yours, we process it only to provide the App and on your instructions, we do not sell it or use it for advertising or to train AI models, and we delete it as described in Part B and the Privacy Policy when you uninstall the App or ask us to.
8. Intellectual property
The App, its code, design and documentation belong to webinstudio. You receive a non-exclusive, non-transferable right to use the App for your store while these Terms apply. Your data, your store content and your trademarks remain yours. The WooCommerce connector plugin is licensed to you under the license included with it.
9. Availability and changes
We aim to keep the App available and to fix faults promptly, but we do not promise uninterrupted or error-free operation. We may change or add features. If we remove a feature your plan includes or raise prices, we will tell you in advance through the App or by email, and you may cancel before the change takes effect. We may suspend a workspace that is being used in breach of these Terms, after telling you unless the breach makes that unsafe.
10. Warranties and liability
The App is provided as is. To the extent the law allows, we make no warranties about the App beyond what these Terms say, and we are not liable for indirect, consequential or incidental losses, lost profits, lost revenue or lost data, or for losses caused by Shopify, WooCommerce, EasyPost, carriers, your hosting or your own staff's decisions. Our total liability to you for all claims arising from the App in any twelve-month period is limited to the fees you paid us for the App in that period. Nothing in these Terms limits liability that cannot be limited under the applicable law, including liability for intent or gross negligence.
11. Term and termination
These Terms apply from the moment you install or connect the App until you uninstall it (Shopify) or disconnect it and ask us to delete your workspace (WooCommerce). Either side may end these Terms at any time: you by uninstalling, we by giving you 30 days' notice, or without notice if you breach these Terms in a way that is not cured within 7 days of our notice or that cannot be cured. When these Terms end, we stop processing your data and delete it as set out in Part B, within 30 days except where the law requires us to keep something longer. Sections 8, 10, 12 and 13 survive.
12. No restrictive clauses
These Terms do not require exclusivity from you beyond their term, do not prohibit you from developing or using competing products or services, and do not restrict how you conduct your business or whom you deal with.
13. Governing law and disputes
These Terms are governed by the laws of the Republic of Korea. Disputes that we cannot settle by talking are brought before the competent court for our place of business in the Republic of Korea, unless the law of your country gives you the right to sue where you live. Mandatory consumer or business protections of your country are not affected.
14. Changes to these Terms
We may update these Terms. We will post the new version here with a new date and, for changes that reduce your rights or increase your obligations, tell you at least 30 days in advance through the App or by email. Continuing to use the App after that date means you accept the new Terms.
15. Contact
webinstudio (웹인스튜디오) 404-1301, 151 Wolsan-ro, Gimhae-si, Gyeongsangnam-do 50990, Republic of Korea contact@webinstudio.co.kr
Part B. Data Processing Addendum
B1. Roles
For personal information about your customers and orders that the App processes, you are the controller and webinstudio is the processor acting on your instructions. For information about you and your staff accounts, webinstudio is the controller, as described in the Privacy Policy.
B2. Subject matter, duration, nature and purpose
| Item | Description |
|---|---|
| Subject matter | Handling of shipping exception cases for your store's orders. |
| Duration | While these Terms apply, plus the deletion period in B9. |
| Nature | Receiving order, fulfillment, refund, return and dispute events from your store; receiving tracking events from your EasyPost account; storing, displaying and ranking cases; carrying out the actions your staff start; producing claim packets and exports; deleting and redacting on request. |
| Purpose | Providing the App to you as described in Part A and the Privacy Policy. No other purpose. |
| Categories of data | Order number and identifiers, amounts, currency, item titles and quantities, order dates; carrier, tracking number, shipment status and tracking events; refund, transaction, return and dispute records; a customer identifier; customer messages your staff link to a case, with sender name; receipt confirmations, ratings and comments left on the status page. The App does not read or store customer names, email addresses, phone numbers or addresses from Shopify; contact fields in webhook payloads are removed before storage. |
| Data subjects | Your customers; your staff. |
B3. Instructions
We process customer data only on your documented instructions. These Terms, the Privacy Policy, your settings in the App and the actions your staff take in the App are those instructions. If we believe an instruction breaks the law we will tell you. We do not sell customer data, share it for advertising, use it for our own marketing or use it to train AI models.
B4. Confidentiality and access
Access to production data is limited to webinstudio staff who need it to operate and support the App and who are bound by confidentiality. Each store's data is kept in its own workspace; your staff see only your store's data, and other merchants never see it.
B5. Security measures
- HTTPS (TLS) for the App's website and API.
- Signature verification of every webhook from Shopify, WooCommerce and EasyPost; no other incoming webhooks are accepted.
- Store access tokens, connector keys, EasyPost keys and webhook secrets encrypted with AES-256-GCM in the database; sign-in sessions and API tokens stored as hashes; passwords (WooCommerce sign-in) as salted scrypt hashes with optional two-step verification and rate-limited sign-in.
- Daily backups encrypted with a key that is not kept on the server; the 14 most recent copies are kept.
- Owner, agent and viewer roles, agent refund limits and export permissions; an audit log of sign-ins, settings changes, connections, exports, retention runs and privacy requests.
- Removal of customer contact fields from webhook payloads before storage; automatic deletion of stored payloads after 30 days.
B6. Sub-processors
| Sub-processor | Purpose | Location |
|---|---|---|
| Amazon Web Services (Amazon Lightsail) | Hosting of the App, its database and backups | Seoul, Republic of Korea |
| Cafe24 | Hosting of our support mailbox (emails you send us) | Republic of Korea |
Shopify, your WooCommerce site, EasyPost (through your own account) and the webhook endpoints you configure are services you have engaged, not our sub-processors. We will tell you through the App or by email at least 30 days before adding a sub-processor; if you object, you may end these Terms before it starts.
B7. International transfers
We process data in Seoul, Republic of Korea. Transfers from the European Union and the United Kingdom to Korea rely on the adequacy decisions described in the Privacy Policy. We send data outside Korea only where your actions and settings direct it: to Shopify, to your WooCommerce site, to the webhook URLs you configure and to EasyPost (tracking numbers and carriers only) through your account.
B8. Assistance
We help you respond to data subject requests. On Shopify, customer data requests and redaction requests reach the App through Shopify's privacy webhooks and are handled as described in the Privacy Policy, section 7: the App prepares a JSON export for the store owner to download, and redacts the named customer's data from the listed orders and cases. For other requests, email us and we will respond within the time the law gives you to answer the data subject. We also give you the information you reasonably need to show compliance, including this Addendum and the Privacy Policy, and answer written questions about our security measures.
B9. Deletion
When you uninstall the App, the App deletes your store's access token at once and, on Shopify's shop redaction webhook 48 hours later, deletes your store's orders, shipments, tracking events, cases, messages, claim packets, settings, staff accounts, sessions, API tokens, webhook settings and audit log. Backup copies expire within 14 days after that, so all copies are gone within 30 days of the uninstall. WooCommerce merchants ask for deletion by email, and we complete it within 30 days. We keep nothing longer unless the law requires it, and in that case only what the law requires.
B10. Security incidents
If we become aware of an actual or suspected breach or compromise of your data, we notify Shopify no later than 24 hours after becoming aware of it, as Shopify's API License and Terms of Use require, and notify you without undue delay with what we know: what happened, which data and how many records are affected as far as we can tell, what we have done and what we recommend you do. We cooperate with you and with Shopify in investigating and resolving the incident.
B11. Shopify data
Data obtained through Shopify's APIs is also subject to Shopify's API License and Terms of Use. We handle it at least as protectively as that document requires, delete it within 30 days when the merchant uninstalls the App or asks, and do not use it for any purpose other than providing the App to you.