Last updated: October 23, 2026
Effective: October 7, 2026
1. Agreement
These Terms govern use of the Pasturly application (“the App”) provided by Nature’s Grove Farm LLC, a Pennsylvania limited liability company (“we,” “us”), by a Shopify merchant (“you,” “Merchant”).
By installing the App you agree to these Terms. If you do not agree, uninstall the App.
Capitalised terms not defined here have the meaning given in Shopify’s Terms of Service.
These Terms cover Pasturly (Shopify), the Shopify app. They do not cover Pasturly (Standalone), our own platform for farms that sell without Shopify, which is not open yet; it will have its own terms, published here before it opens. What Pasturly will do with personal data is in Sections 14 and 15 of our Privacy Policy.
2. The service
The App gives direct-to-consumer farms operational tools that Shopify does not provide on its own, including: customer-built subscription boxes; one-off and manual orders; selling by catch weight; pickup points, local delivery routes and national shipping as fulfillment channels; order building, packing, labels and staging; handing orders over at pickups and markets; route planning with a driver’s page; and cut sheets for whole, half and quarter animals.
The App operates as a layer on top of Shopify. It does not process payments, store payment credentials, or act as a merchant of record. Where the App bills a subscription, edits an order to a weighed total, or captures an authorised payment, it does so by instructing Shopify through Shopify’s APIs, and Shopify performs the payment processing.
We may modify, add or remove features. We will give at least 30 days’ notice before removing or materially degrading a feature you rely on, except where required for security or legal compliance.
3. Eligibility and account
You must have an active Shopify store and be legally able to enter this agreement while operating a lawful business. To sell subscription boxes, your store must be on a Shopify plan that supports subscriptions, with a payment gateway that supports subscription payment methods. To sell by catch weight, your store must be set to authorise payment at checkout and capture it later.
You are responsible for the security of your Shopify account, including maintaining strong credentials and multi-factor authentication. You are responsible for all activity under your account, including activity by anyone you give a driver’s link, a market link or a PIN.
4. Fees
Fees are charged through Shopify’s app billing according to the plan you select (currently Market, Route or Harvest) on the Shopify-hosted plan page, and appear on your Shopify invoice. Prices and any free trial are shown on that page before you choose. Fees are billed in advance and are non-refundable except where required by law.
We may change pricing with at least 30 days’ notice. Continued use after the change takes effect constitutes acceptance. Existing subscribers may be grandfathered at our discretion.
We may offer the App free of charge to selected Merchants, including our own stores and testing partners.
4.1 Optional setup service
We offer an optional, one-time setup service (“Turnkey setup”): building your Shopify store, setting up the App for your farm, and a one-on-one walkthrough. It is never required to install or use the App. It is quoted and invoiced directly by Nature’s Grove Farm LLC, not through Shopify’s app billing, and is a separate agreement from your App subscription. The setup fee does not include your Shopify plan, your App plan, any paid theme or your domain name.
To provide it, you supply your product list with prices, and any photos, logos and other images to appear on your store. You confirm that you own those materials or are licensed to use them on your website, that the product information and prices are accurate, and that you are responsible for them. We use them only to build your store, and you keep all rights in them (section 7).
5. Your responsibilities
5.1 Regulatory compliance
This section is important. Read it.
You are solely responsible for compliance with all laws applicable to your business, including without limitation food safety regulations, meat and poultry inspection requirements, interstate commerce restrictions, labelling requirements, weights and measures law, cottage food and custom-exempt processing rules, and consumer protection law.
The App includes features intended to assist with certain regulatory constraints, including limiting the states you ship to according to the shipping reach you choose. These features are tools that operate on information you provide. They are not legal advice, they are not a compliance guarantee, and they do not substitute for your own legal obligations.
You are responsible for correctly configuring your shipping reach, product information and pricing. We do not verify the accuracy of information you enter. In particular:
- Catch weight. The weights you or your staff enter determine what your customers are charged. You are responsible for weighing on scales that are legal for trade where the law requires it, and for the accuracy of every weight entered.
- Cut sheets. The cutting options the App offers for beef, pork and lamb are a starting point. You are responsible for confirming with your processor that every option you offer can actually be cut, and for what your processor is sent.
5.2 Your customers
You are the controller of your customers’ personal data. You are responsible for your own privacy policy, for obtaining any required consents, for the accuracy of what you tell customers about their subscriptions and orders, and for responding to their data rights requests.
You are responsible for fulfilling orders the App generates, including honouring the subscription terms your customers agreed to.
5.3 Acceptable use
You will not: use the App for any unlawful purpose; use the subscription features for installment plans, layaway arrangements, crowdfunding, or financing of a single delivered product, which Shopify’s API terms prohibit; attempt to circumvent our billing; reverse engineer, resell or sublicense the App; use the App to send unsolicited marketing; or interfere with the App’s operation or other Merchants’ use of it.
Note on livestock share arrangements. Herd shares, animal shares and similar arrangements where a customer pays over time for a portion of a single animal constitute installment plans and must not be operated through the App’s subscription features. Doing so risks your store and our API access. The App’s whole-animal and cut sheet features take a share’s payment through ordinary orders for that reason.
5.4 Your staff and helpers
The App lets you give drivers a link and PIN of their own, and give whoever works your market stall a shared link and their own PIN. Those pages show customer names, addresses, phone numbers and orders. You decide who receives them, and you are responsible for resetting a link or PIN when someone should no longer have access.
6. Data
Our handling of personal data is governed by our Privacy Policy and by the Data Processing Agreement at Schedule A, which forms part of these Terms.
In summary: for data about your customers, you are the controller and we are the processor. We process it only on your instructions and only to provide the App.
7. Intellectual property
We retain all rights in the App, its source code, design and documentation. These Terms grant you a limited, non-exclusive, non-transferable, revocable licence to use the App while your installation is active.
You retain all rights in your data, your product information, and your customer relationships. You grant us a limited licence to process that data solely to provide the App.
Feedback you provide may be used without obligation or compensation.
8. Third-party dependencies
The App depends on Shopify’s platform and APIs, and on third-party infrastructure providers listed in Annex III. We are not responsible for the availability, performance or acts of those third parties. Changes to Shopify’s platform, APIs or policies may require changes to the App or may make features unavailable.
9. Disclaimers
THE APP IS PROVIDED “AS IS” AND “AS AVAILABLE” WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.
We do not warrant that the App will be uninterrupted or error-free, that scheduled billing attempts or payment captures will always succeed, that routes the App plans will be the shortest available, that every address can be placed on a map, or that the App will meet your specific requirements.
We specifically do not warrant that use of the App will result in compliance with any law or regulation.
10. Limitation of liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, LOST REVENUE, LOST DATA, SPOILED OR WASTED INVENTORY, OR BUSINESS INTERRUPTION, ARISING FROM OR RELATING TO THE APP.
OUR TOTAL AGGREGATE LIABILITY WILL NOT EXCEED THE GREATER OF (A) THE FEES YOU PAID US IN THE TWELVE MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM, OR (B) ONE HUNDRED US DOLLARS.
Nothing limits liability for gross negligence, wilful misconduct, or anything that cannot lawfully be limited.
11. Indemnity
You will indemnify and hold us harmless from claims arising out of: your breach of these Terms; your violation of any law, including food safety, meat inspection and weights and measures regulations; your products; disputes with your customers; and information you provide through the App.
12. Term and termination
These Terms apply while the App is installed.
You may uninstall at any time from your Shopify admin. We may suspend or terminate for material breach, non-payment, or where required by Shopify or by law, with notice where practicable.
12.1 What happens on uninstall — read this
Shopify cancels subscription contracts created by an app approximately 48 hours after that app is uninstalled. This is Shopify platform behaviour and is outside our control.
If you uninstall the App, your active box subscriptions will be cancelled and your subscribers will stop being billed and stop receiving orders. This is not reversible by reinstalling.
Do not uninstall the App while you have active subscribers unless you intend to end those subscriptions. Contact us first if you are considering migrating away, and we will assist with an export.
About 48 hours after you uninstall, Shopify asks us to erase your store’s data, and we delete everything we hold for your store at that point — in every case within 30 days of uninstall — in accordance with our Privacy Policy. If you reinstall before then, your data is still there. Ask for an export before you uninstall if you want one.
13. Changes to these Terms
We may update these Terms. Material changes will be notified at least 30 days in advance by email or in-app notice. Continued use after the effective date constitutes acceptance.
14. General
Governing law. These Terms are governed by the laws of the Commonwealth of Pennsylvania, without regard to conflict of law principles. Disputes will be resolved in the state or federal courts serving Westmoreland County, Pennsylvania.
Entire agreement. These Terms, the Privacy Policy and Schedule A constitute the entire agreement between us.
Severability. If any provision is unenforceable, the rest remains in effect.
No waiver. Failure to enforce a provision is not a waiver.
Assignment. You may not assign these Terms without our consent. We may assign in connection with a merger, acquisition or sale of assets, including a transfer of the App to another entity.
Contact. pasturlyapp@gmail.com
Schedule A — Data Processing Agreement
This DPA forms part of the Terms of Service and applies where we process Personal Data on your behalf.
A1. Definitions
Applicable Data Protection Law — all laws relating to personal data processing applicable to either party, including the EU GDPR, UK GDPR, the CCPA/CPRA, and other US state privacy laws.
Controller, Processor, Data Subject, Personal Data, Processing, Personal Data Breach — as defined in Applicable Data Protection Law.
Sub-processor — any third party engaged by us to process Personal Data.
End Customer — an individual who purchases or subscribes through your store.
A2. Roles
You are the Controller of End Customer Personal Data, and of Personal Data about drivers and market staff you add to the App. We are the Processor.
Where we process data about you as a Merchant — your account, configuration and support correspondence — we act as Controller, governed by our Privacy Policy rather than this DPA.
Shopify is an independent Controller and/or Processor in its own right under its own terms.
A3. Processing instructions
We process Personal Data only:
- On your documented instructions, which include these Terms and your configuration of the App
- As necessary to provide the App
- As required by law, in which case we will inform you unless legally prohibited
We will notify you if we consider an instruction to infringe Applicable Data Protection Law.
We will not sell Personal Data, share it for cross-context behavioural advertising, retain or use it outside the direct business relationship, or combine it with data from other sources except as necessary to provide the App. We certify we understand and will comply with these restrictions.
A4. Confidentiality
Personnel with access to Personal Data are bound by confidentiality obligations and are informed of the confidential nature of the data.
A5. Security
We implement technical and organisational measures appropriate to the risk, including encryption of Personal Data in transit and at rest, access limited to personnel who need it, and isolation of each Merchant’s data from every other Merchant’s. We will not materially decrease the overall security of the App during the term.
A6. Sub-processors
You give general authorisation for us to engage Sub-processors. The current list is Annex III below, also published at pasturly.com/terms.
We will give at least 30 days’ notice before adding or replacing a Sub-processor. You may object on reasonable data protection grounds within that period; if we cannot resolve the objection, you may terminate without penalty for the remainder of any prepaid term.
We impose data protection obligations on Sub-processors no less protective than this DPA, and remain liable for their performance.
A7. Data subject rights
Taking into account the nature of the Processing, we will assist you in responding to Data Subject requests by:
- Showing what the App holds about a subscriber on their subscriber page, and letting you correct their address, contents and notes there
- Implementing Shopify’s mandatory compliance webhooks (
customers/data_request,customers/redact,shop/redact) - Responding to your reasonable requests for assistance
If we receive a request directly from a Data Subject relating to your store, we will refer them to you and inform you promptly.
A8. Personal Data Breach
We will notify you without undue delay and in any event within 72 hours of becoming aware of a Personal Data Breach affecting your Personal Data.
Notification will include, to the extent known: the nature of the breach; categories and approximate number of Data Subjects and records affected; likely consequences; measures taken or proposed; and a contact point. Where information is not available within 72 hours, we will provide it in phases without undue further delay.
We will assist you in meeting your own breach notification obligations.
A9. Data protection impact assessments
We will provide reasonable assistance with data protection impact assessments and prior consultations with supervisory authorities, taking into account the nature of Processing and information available to us.
A10. Deletion and return
On termination, we will delete Personal Data in accordance with the retention schedule in our Privacy Policy — in summary, when Shopify sends shop/redact, normally about 48 hours after uninstall, and in every case within 30 days of uninstall — unless legally required to retain it.
Deletion applies to our live systems. Personal Data may persist in routine encrypted backups until those backups expire on their own schedule, which is at most 89 days. We do not edit backups selectively, we do not use them to restore deleted data, and Personal Data recovered in any restore is subject to the same deletion rules.
On request before deletion, we will provide an export of your data in a machine-readable format.
A11. Audit
We will make available information reasonably necessary to demonstrate compliance with this DPA.
You may request an audit no more than once per twelve months, on 30 days’ written notice, at your expense, subject to confidentiality, conducted during business hours and without unreasonable disruption. Where available, we may satisfy an audit request by providing a third-party audit report.
A12. International transfers
Personal Data is stored in the United States. Where Personal Data is transferred from the EEA, UK or Switzerland to a country without an adequacy decision, the parties agree the EU Standard Contractual Clauses (Module Two, Controller to Processor) are incorporated by reference, with:
- Clause 7 (docking) — included
- Clause 9 — Option 2, general written authorisation, 30 days’ notice
- Clause 11 — independent dispute resolution not included
- Clause 17 — governed by the law of Ireland
- Clause 18(b) — courts of Ireland
- Annex I and Annex III of the Clauses — as set out below; Annex II of the Clauses — the measures described in Section A5
The UK International Data Transfer Addendum applies to UK transfers.
A13. Liability
Liability under this DPA is subject to the limitations in Section 10 of the Terms, except where Applicable Data Protection Law prohibits such limitation.
Annex I — Details of Processing
A. Parties Data Exporter: the Merchant. Data Importer: Nature’s Grove Farm LLC (pasturlyapp@gmail.com), operating Pasturly.
B. Subject matter — provision of subscription, ordering and fulfillment tools for the Merchant’s Shopify store.
C. Duration — for the term of the Merchant’s installation, plus the retention period in the Privacy Policy.
D. Nature and purpose — creating and managing box subscriptions and their contents; scheduling and executing billing attempts; handling failed payments; taking one-off and manual orders; editing orders to a weighed total and capturing the authorised payment; determining which fulfillment channels serve an address and on what dates; building, packing, labelling and staging orders; recording handovers at pickups and markets; placing delivery addresses on a map and planning delivery routes; showing drivers and market staff the orders they need; collecting and printing cut sheets; providing operational reporting.
E. Categories of Data Subjects — the Merchant’s End Customers who purchase or subscribe, and people who join a waitlist; the Merchant’s drivers and market staff added to the App.
F. Categories of Personal Data
- Identity: name
- Contact: email address, phone number
- Location: shipping and billing address, ZIP code, and the map point a delivery address geocodes to
- Transactional: order history, subscription contract details, box contents, fulfillment channel and date, pack weights, cut sheet choices, missed and rescheduled boxes
- Notes the Merchant writes about a subscriber (for example delivery instructions)
- Payment metadata: card brand, last four digits, expiry date, read from Shopify when displayed and not stored by the App (no full card numbers, no CVV, no raw credentials)
- Drivers and market staff: name, a PIN stored only as a one-way hash, and sign-in times
G. Special category data — none. The App is not designed to process special category data and Merchants must not configure it to do so.
H. Frequency — continuous, for the duration of the installation.
I. Retention — as set out in the Privacy Policy.
Annex III — Sub-processors
| Sub-processor | Purpose | Location |
|---|---|---|
| Shopify Inc. | Platform, payment processing, customer notifications, source of record | Canada / global |
| Railway Corporation | Application hosting and PostgreSQL database hosting and backup | United States (US East, Virginia) |
Other recipients. The App does not send email or text messages itself; notifications to End Customers are sent by Shopify. To plan delivery routes, the App sends delivery street addresses — with no name, email, phone or order details — to the US Census Bureau Geocoder, a free public service of the US government, which returns a map point. When a driver opens turn-by-turn directions, the stop addresses are passed to Google Maps by the driver’s own phone, not by the App.
This list is maintained at pasturly.com/terms.
Pasturly (Standalone), our own platform. When it opens, it will use these sub-processors in place of Shopify:
| Sub-processor | Purpose | Location |
|---|---|---|
| Stripe, Inc. | Card payments, taken on each farm’s own Stripe account; sales tax calculation; Pasturly’s own plan billing | United States |
| Postmark (ActiveCampaign, LLC) | Sending email on Pasturly’s and each farm’s behalf | United States |
| Railway Corporation | Application hosting and PostgreSQL database hosting and backup | United States |