Effective August 16, 2026 · Advanced Binary Operations LLC
Provider: Advanced Binary Operations LLC ("ABO", "we", "us"), a California limited liability company (Entity No. B20260081616). Contact: admin@advancedbinaryoperations.com
FileSteward is a Shopify app installed by a merchant on their store. When a buyer purchases a digital product, FileSteward emails that buyer a secure download link.
For buyer personal data that ABO processes to fulfill the Merchant's orders, the Merchant determines the purposes of the processing and acts as controller, and ABO processes that data on the Merchant's behalf as processor, to the extent those roles apply under applicable data-protection law.
ABO may separately act as controller for personal data processed for its own account administration, security, legal-compliance, and service-management purposes.
Buyers should direct requests to the merchant, who can act through the app or through Shopify. We assist merchants with those requests.
Buyers. To fulfill a purchase, FileSteward processes the buyer email address together with Shopify order and line-item identifiers needed to determine the purchased digital product. We retain the buyer email address and the order, entitlement and delivery information described below, including the relevant Shopify order identifier, associated file or download entitlement, download count, and link status. Shopify may transmit additional information in an order payload. FileSteward extracts the fields needed for fulfillment and does not retain the additional buyer fields as application data. In particular, FileSteward does not retain buyer postal addresses, telephone numbers or payment-card details as part of its application records.
Email addresses are normalised to lowercase on storage.
Merchants. The myshopify domain, a Shopify access token, and app settings (the plan, whether the review prompt has been shown).
Merchant-uploaded files. File contents are the merchant's. We store the bytes and metadata (filename, size, content type) to deliver them. We do not inspect, index, or use file contents for any other purpose. Merchant-uploaded files may themselves contain personal data selected by the Merchant. ABO does not determine the contents of those files and processes them on the Merchant's behalf to provide the service.
ABO processes buyer personal data on the Merchant's documented instructions to provide the service. The Merchant, as controller, is responsible for identifying and documenting the lawful basis applicable to its processing of buyer personal data.
We do not sell personal data, share it for advertising, use it to train machine-learning models, or use it to market to buyers. FileSteward sends buyers exactly one kind of message: the delivery of a file they paid for.
FileSteward's current service architecture processes data in the United States. Where a Merchant's use of FileSteward is subject to GDPR transfer requirements, the Data Processing Agreement addresses the transfer mechanism and sub-processors required for that processing.
customers/redact request from Shopify, the buyer's email is anonymised on all records and their live download links are revoked.app/uninstalled), the access token is deleted.shop/redact request from Shopify (sent ~48 hours after uninstall), everything for that shop is deleted: file bytes, files, attachments, download links, delivery logs, settings, data requests, and the access token.Abandoned uploads (bytes sent but never confirmed) are deleted automatically after 24 hours.
While a Merchant's FileSteward account remains active, delivery records are retained as the Merchant's order-delivery and audit history unless they are anonymized or deleted earlier through an applicable data request. They are deleted with the Merchant's shop data at termination as described below.
Shopify's shop/redact request is the normal automated trigger for shop-data deletion. If that request is not received, the automated deletion will not occur. Where applicable data-processing terms require deletion or return at termination, those terms govern and the Merchant may contact ABO to exercise the applicable deletion or return instruction.
Buyers should ordinarily direct requests to the Merchant. Where Shopify relays a privacy request to FileSteward, or a request otherwise reaches us in our capacity as processor, we assist the Merchant in responding as required by the applicable processing terms.
Depending on where you live you may also have rights to object, restrict processing, or complain to a supervisory authority. Nothing here limits those.
We do not claim any certification (SOC 2, ISO 27001) and do not have one.
FileSteward is a business tool sold to merchants and is not directed to children. We do not knowingly process children's personal data.
Material changes will be posted here with a new effective date, and notified to merchants in-app where the change affects them.
admin@advancedbinaryoperations.com — privacy questions, data requests, abuse and takedown reports.