Gondo terms of sale

Last updated: 16 October 2026.

These terms apply between the publisher of Gondo and each merchant who uses Gondo for their shop on PrestaShop. The merchant accepts them by ticking the box provided in the merchant area. The data processing agreement, in the appendix, is part of them. The French version of these terms is the one that prevails.

1. Who is who

The publisher is Nicolas Ryckelynck, in his own name, whose contact details appear in the site's legal notice. Contact: contact@gondosearch.com.

The merchant is the professional who runs one or more shops on PrestaShop and connects them to Gondo from their account. Gondo is reserved for professionals, and these terms are not addressed to consumers.

2. What Gondo does

Gondo replaces the shop's search. It is made of a PrestaShop module, which the merchant installs in their shop, a search service hosted by the publisher, and the merchant area of the gondosearch.com site. The module gives the service the shop's catalogue through its export feed. The service indexes it and answers visitors' searches. The merchant follows their figures and sets up the search in the module's administration.

When the service does not answer within the delay set in the module, the results page falls back to PrestaShop's native search. It also falls back to it when the shop's Gondo search is suspended or deleted.

3. The test phase

Gondo is currently in a test phase. During this phase, the service is provided free of charge. The trial and the subscription go through Stripe's test mode: no real payment is asked for or taken, and the invoices issued have no value. The prices, payments and invoices described in article 5 only really apply once the paid subscription opens.

The publisher may change the service, suspend it or end the test phase at any time, warning merchants by email as soon as possible. He makes no availability commitment during this phase.

Before opening the paid subscription, the publisher writes to each merchant at least thirty days in advance, with the terms that will then apply, including the identity of the business that will sell the subscription and its prices. A shop's paid subscription only starts once these terms are accepted. Without this agreement, the shop's Gondo search is suspended at the end of the test phase, and nothing is charged.

4. The account and the shops

The merchant opens their account with their email address, and signs in through a link sent to that address. They keep access to their mailbox to themselves. For each shop, they receive a key, shown only once, which they paste into the module and share with no one else. If they lose it, or think a third party knows it, they create a new one from the shop page. The old one keeps working for twenty-four hours, giving time to paste the new one.

The merchant only connects to Gondo shops they have the right to run. The number of shops per account is limited, and the merchant area says when the limit is reached.

A shop connected to Gondo without a trial or a subscription has its search suspended seven days after it was added. Nothing is erased, and starting the trial or the subscription brings it back.

5. Prices and payment

The subscription is taken per shop. Its plan depends on the shop's number of indexed products, and its price, excluding tax and per month, is shown on the plan choice page before anything is confirmed. VAT is added when it is due.

Each account is entitled to a single free trial of fourteen days, with no card. Without a payment method at the end of the trial, the subscription stops on its own, and nothing is charged. A new subscription after a cancellation, or the one of a second shop, is paid from the first day.

The subscription is paid in advance each month, with the payment method saved at Stripe, and renews each month until it is cancelled. Stripe issues the invoices. The merchant changes plan or payment method, and finds their invoices, with “Manage my subscription”.

If a payment fails, Stripe retries it several times. If these retries fail, the shop's Gondo search is suspended. Any sum due and not paid on its due date automatically bears late payment penalties at three times the French legal interest rate, as well as a fixed indemnity of 40 euros for recovery costs, as provided by article L441-10 of the French commercial code.

The publisher may change his prices. He then warns the merchant by email at least thirty days in advance, and the merchant may cancel before the new price applies.

6. Duration and cancellation

The subscription has no minimum term. The merchant cancels it at any time with “Manage my subscription”. Cancellation takes effect at the end of the period already paid, which is not refunded, and the shop's Gondo search stops that day.

The publisher may suspend or terminate a shop's subscription if the merchant does not pay, or uses Gondo in a way that endangers the service or the other shops, after warning them by email, except in an emergency. The publisher may also stop the service, warning the merchant by email at least thirty days in advance. He then refunds the part already paid of the current period.

The merchant can delete a shop, or their whole account, from the merchant area, as soon as no subscription is running on it. Deletion erases the shop, its search index, its statistics and its key.

7. The shop's data

To work, Gondo reads the shop's catalogue, that is its products, categories, prices and their availability. To rank products of equal relevance, it also reads, for each product, totals over thirty days (quantities sold and revenue excluding tax of validated orders), its price excluding tax, its purchase price when it is filled in, its stock quantity and the date it was added, as well as the shop's number of validated orders. It reads neither orders one by one, nor customers.

The publisher only uses a shop's data to provide the service to that shop. He does not sell it, shows it to no other merchant, uses it for no other shop and keeps it confidential. It is erased when the shop is deleted, and disappears from the backups fourteen days later at the latest.

Searches made by the shop's visitors are processed on the merchant's behalf, under the data processing agreement in the appendix. The data of the merchant's account is processed under the site's privacy policy.

8. What remains the merchant's responsibility

The merchant remains responsible for their shop, their catalogue and what they sell. They inform their shop's visitors of the processing of their searches in their own privacy policy, for example with the text offered in the appendix. They keep their own backups of their shop, and they keep each shop's key to themselves.

9. Ownership

The module, the service, their code and the Gondo name remain the publisher's property. For the duration of their contract, the merchant has the right to install the module in the shops they connect to Gondo and to use it for them. The shop's catalogue, settings and data remain the merchant's.

10. Liability

The publisher does his best for Gondo to find the right products and answer fast. He guarantees neither a given search result, nor a rise in sales, nor a service available without interruption.

The publisher is liable for the direct damage the merchant suffers through his fault. His total liability, for a shop, is limited to the sums paid by the merchant for that shop's subscription during the twelve months before the event in question. During the test phase, when nothing is paid, the publisher is only liable for his gross negligence or wilful misconduct. None of these limits applies to what the law forbids limiting.

11. Changes to these terms

The publisher may change these terms. He warns the merchant by email at least thirty days before a change applies, and a merchant who refuses it may cancel before that date. The date of the last update appears at the top of this page.

12. Applicable law

These terms are governed by French law. In case of disagreement, the merchant and the publisher first look for an amicable solution, in writing. Failing that, the dispute is brought before the competent court. The French version of these terms is the one that prevails.

Appendix 1. The data processing agreement

This agreement applies Article 28 of the GDPR. It is part of the terms above, and lasts as long as they do.

Roles. For the searches made by visitors of their shop, the merchant is the controller, and the publisher is their processor.

Subject and purpose. The publisher processes this data for a single purpose, running the shop's search. This includes answering searches, offering suggestions, limiting abuse, and showing the merchant the dashboard and analysis of their searches. He processes it for no other purpose.

Data subjects. The shop's visitors who use its search.

Data. The text typed in the search, which may contain personal data typed by mistake. The IP address and the browser name, received with each connection of the search panel. For each search kept, the day without the time, the number of results, the duration, whether it found an exact product, and three yes or no values, which say whether it came from the shop itself, whether the visitor was signed in to their customer account and whether they refused the correction offered. The first two are worked out in the shop, and no IP address or identifier leaves it. Finally, the visit identifier the module may pass on, drawn in the shop, from which the visitor cannot be found. The service asks for no sensitive data.

What is done with each. The IP address is used for call limits, in memory only, and leaves it at most two minutes after the last call. Its network, or the visit identifier, is used to work out a fingerprint for the day, with a key drawn at random each day and never written, to count the connections of suggested searches. This fingerprint stays in memory until the day changes, and only a number of connections per search and per day is written. The browser name is neither read nor written. Only the text of searches that are submitted, or from which a product is opened, is kept, and only after email addresses, phone numbers, IBANs and runs of at least thirteen digits other than a valid product barcode are masked. No IP address, no browser, no time and no identifier is written, neither in the data nor in the logs.

Duration. Each search kept is erased after 90 days, during the following night, with its connection counts. Backups keep it for fourteen more days at most, since each backup is erased fourteen days after it was made. When the shop is deleted, all its data is erased from the service at once, and disappears from the backups fourteen days later at the latest.

Location. The data is processed and hosted in France, by OVH SAS, in its Gravelines data centre. It is not transferred outside the European Union.

The merchant's instructions. The publisher only processes the data on the merchant's documented instructions, which are these terms, this agreement and the settings the merchant chooses in the module. If an instruction seems to him to breach the GDPR, the publisher tells the merchant at once.

Confidentiality. Only the publisher accesses the data. Anyone he might one day allow to access it would be bound to confidentiality.

Security. All exchanges go over HTTPS. Each shop has its own key and only reads its own data. Personal data typed by mistake is masked before being written, as described above. The search server keeps no access log, and its logs contain neither visitors' IP addresses nor the text of their searches. The backups placed on the second server are encrypted. Access to the servers is restricted to the publisher, by key only and never directly with the root account, and the service runs with limited rights.

Sub-processors. The merchant authorises the publisher to use OVH SAS, 2 rue Kellermann, 59100 Roubaix, France, to host the servers and backups. The publisher warns the merchant by email at least thirty days before adding or replacing a sub-processor, and the merchant may object by cancelling. The publisher makes sure that each sub-processor is bound, by contract, to data protection obligations at least equivalent to those of this agreement, and he remains liable for it towards the merchant.

Visitors' rights. The publisher helps the merchant answer visitors' requests. Since the service keeps nothing that identifies a visitor, it cannot find their searches from their name or address. On the merchant's written request, the publisher erases within one month the searches kept that contain a given text, and removes them from the suggestions. If a visitor contacts the publisher, he passes the request on to the merchant.

Data breaches. The publisher warns the merchant by email without undue delay, and at the latest 48 hours after becoming aware of it, of any data breach affecting their shop. He gives them what he knows of its nature, of the data and visitors concerned, of its likely consequences and of the measures taken, so that the merchant can, if needed, notify it to the CNIL within 72 hours.

Assistance to the merchant. With the information available to him, the publisher helps the merchant with the security of the processing, with an impact assessment if the merchant carries one out, and with the consultation of the CNIL if it is needed.

End of the contract. When the shop is deleted, the publisher erases all its data, as described above, and keeps no copy of it outside the backups, which disappear fourteen days later at the latest. A merchant who wants to get their data back before the deletion asks for it in writing, and the publisher hands it over in a readable format.

Audits. The publisher keeps a record of the processing he carries out on behalf of merchants. On request, he gives the merchant the information needed to show compliance with this agreement, and answers their questions in writing. The merchant may have an audit carried out at most once a year, on documents, or through an inspection agreed thirty days in advance, at their own cost, by an auditor bound to secrecy. An audit never covers other merchants' data.

Appendix 2. A text for your shop's privacy policy

The merchant may reuse this text in their shop's privacy policy, and adapt it. It is written on behalf of the shop.

Our shop's search. Our shop's search is provided by Gondo, which processes it on our behalf. While you type, your browser sends the text you enter to Gondo's search service, which also receives, as with any connection, your IP address and the name of your browser. Gondo uses them to answer you and to limit the number of calls, and never records your IP address, your browser, the time or any identifier. We keep the text of the searches you submit or from which you open a product, for 90 days at most and without linking it to you, to improve our search and our catalogue. Before anything is recorded, an email address, a phone number, an IBAN or a long number typed by mistake is replaced with a neutral marker. The searches suggested before the first keystroke are searches typed by other visitors, from at least five connections and on at least two days, with no address, no number and no profanity. To count these connections without identifying them, Gondo works out each day a fingerprint of the network of your connection with a key drawn at random, which it forgets when the day changes without ever having written it. The search sets no cookie. This data is hosted in France, by OVH, and its backups keep it for fourteen more days at most. Our module also keeps on our server, for seven days at most, a summary of the searches typed at least three times, with nothing that identifies you. Legal basis: our legitimate interest in offering you a search that works, and in improving it.