New version of the data processing agreement
DPA § 6.1: encryption of credentials
The data processing agreement now names the subject of the encryption commitment in § 6.1: what is stored encrypted are all credentials — tokens, API keys and other secrets. The plain identifiers of your connected accounts, such as pixel ID, measurement ID or ad account ID, are not credentials; they are stored unencrypted alongside so that they can be displayed to you in the app and in our administration interface. Store-specific encryption keys, transport encryption and encrypted backups remain unchanged. The new version requires your acceptance.