BotScrub Terms of Service

Effective date: October 18, 2026 Publisher: Second to None Media LLC ("we", "us"), P.O. Box 590907, Houston, TX 77259, USA Contact: info@secondtononemedia.com

These terms apply to BotScrub: Fake Account Cleanup ("BotScrub" or the "App") and to the Shopify merchant that installs it ("you"). By installing or using the App, you agree to these terms. Our Privacy Policy explains how we handle data and is part of these terms.

1. Who we are

BotScrub is published by Second to None Media LLC, a Texas company. You can reach us at info@secondtononemedia.com or by mail at P.O. Box 590907, Houston, TX 77259, USA.

2. What the App does

The App scans your store's customer accounts, gives each one a bot score with the reasons, and lets you take reversible clean-up actions on the accounts you choose: adding a tag, unsubscribing from email and SMS marketing, and, if you connect them, suppressing the profile in your Klaviyo account or archiving the contact in your Mailchimp audience. Every action is logged so you can undo it.

3. Plans and billing

All charges are billed by Shopify through Shopify's app billing. We never ask for card details.

• Paid plans include a 14-day free trial.
• You can upgrade, downgrade or cancel at any time from the Plan page in the App. Uninstalling the App cancels your subscription.
• Charges appear on your Shopify bill. Refunds and billing disputes are handled by Shopify under Shopify's terms.
• Prices may change. We will tell you before a price change affects your plan.

4. Your responsibilities

• You make the decisions. Bot scores are advisory. They are an estimate, not a guarantee, and may be wrong. You review and confirm every action before it runs. The App never acts on its own.
• You are responsible for the actions you confirm and for having a lawful basis to process your customers' data.
• Keep your Klaviyo and Mailchimp API keys secure and connect only accounts you control.

5. No deletion, and undo

The App never deletes customers in Shopify, Klaviyo or Mailchimp. Accounts with orders, accounts tagged "botscrub-not-a-bot", and accounts older than 90 days are never acted on. You can undo actions from the Activity page while the undo log keeps them (12 months).

6. Acceptable use

Do not use the App to break the law, to break Shopify's terms, to access stores or accounts you are not authorized to manage, or to interfere with or reverse engineer the service.

7. Disclaimer and limitation of liability

The App is provided "as is" and "as available", without warranties of any kind, to the extent the law allows. We do not promise that the App will catch every bot, that it will never flag a real customer, or that it will lower your email platform bills.

To the extent the law allows, we are not liable for indirect, incidental, special or consequential damages, or for lost profits, revenue or data. Our total liability for any claim is limited to the amount you paid us for the App in the 12 months before the claim.

8. Termination

You can stop using the App at any time by uninstalling it. We may suspend or end access if you break these terms or if we stop offering the App, and we will give notice where we reasonably can. After the App is uninstalled, your data is deleted as described in section 11.

9. Changes

We may update these terms. We will post the new version here with a new effective date and tell you about material changes through the App or by email. Continuing to use the App after a change means you accept it.

10. Governing law

These terms are governed by the laws of the State of Texas, USA, without regard to its conflict of law rules. Courts in Harris County, Texas have jurisdiction over any dispute, unless the law requires otherwise.

11. Data Processing

This section is our data processing agreement with you.

Roles. You are the controller of your customers' personal data. Second to None Media LLC is your processor (service provider).

Instructions and purpose. We process customer data only on your instructions, given through the App, and only to detect likely bot accounts, carry out the clean-up actions you confirm, undo them, and, if you connect them, sync those actions to your own Klaviyo or Mailchimp account. We do not sell customer data or use it for any other purpose.

Data we process. Customer name, email address, whether a default address exists (not the address itself), order count, tags, notes, account creation date, and email marketing consent. If you grant phone access, the App reads SMS marketing consent only. It does not read or store phone numbers.

Subprocessors. Railway Corp. (United States) hosts the App, its database and its backups. When you connect Klaviyo or Mailchimp, affected customers' email addresses are sent only to your own Klaviyo or Mailchimp account. Those are your providers, under your agreements with them. We will update this list here before adding a new subprocessor.

Security. All traffic uses HTTPS (TLS). The database is encrypted at rest by our hosting provider. Klaviyo and Mailchimp API keys are also encrypted by the App with AES-256-GCM and are never shown again or logged. Shopify webhooks are verified with HMAC signatures. Access to production systems is limited to the owner of Second to None Media LLC.

Retention.

• Scan results are not stored.
• The undo log is kept for 12 months, then deleted automatically.
• When Shopify sends a customers/redact request, we delete that customer's undo-log records.
• When you uninstall, sessions are deleted right away. All remaining store data is deleted when Shopify sends shop/redact, 48 hours after uninstall.
• Database backups are kept for 7 days, then deleted.

Breach notification. If a security incident affects your data, we will notify you without undue delay and help you meet your own notification duties.

Data subject requests. We support Shopify's privacy webhooks (customers/data_request, customers/redact, shop/redact) and will help you answer access, correction and deletion requests. You can also email us.

End of service. When the service ends, we delete your data as described above, except copies that remain in backups for up to 7 days.

12. Contact

Second to None Media LLC, P.O. Box 590907, Houston, TX 77259, USA. Email: info@secondtononemedia.com