Privacy Policy

1. Information we collect

We collect information in the following categories:

• Merchant and shop data: shop domain, Shopify access tokens, app subscription/plan status, and configuration you enter in the App admin.
• Order and fulfillment data: order IDs, line items, custom line item properties, customer email, shipping name and address, and personalization metadata needed to display and fulfill customized orders.
• Buyer-uploaded content: files and design previews submitted through theme app blocks (for example text, images, PDFs, and Design Studio exports) via Shopify App Proxy.
• Technical data: server logs, error logs, and security/rate-limit records needed to operate and protect the App.

2. How we use information

• Provide product personalization and order management features.
• Store design files and order customization details for merchants.
• Submit orders to third-party fulfillment providers when you enable integrations such as Printful.
• Maintain security, prevent abuse, and improve reliability.
• Comply with legal obligations and Shopify platform requirements.

3. Legal bases and roles

For merchant account and shop configuration data, we process data to perform our contract with you and provide the App.

For end-customer order and upload data submitted on your storefront, you are the merchant of record. You determine what personalization fields to collect. We process that data on your behalf to operate the App and any fulfillment workflows you enable.

4. Sharing and subprocessors

We share information only as needed to operate the App:

• Shopify: platform APIs, webhooks, billing, and app hosting within Shopify Admin.
• Cloud hosting and database providers: to run the App backend and store application data.
• Cloudflare R2 (or equivalent object storage): to store buyer-uploaded design files and preview images.
• Printful (optional): when you connect Printful, we send fulfillment-related order and design data required to produce and ship products.

We do not sell personal information.

5. Data retention

We retain merchant and order data while the App is installed and as needed to provide the service, resolve disputes, and meet legal obligations. When the App is uninstalled, we delete shop-related data in response to Shopify's mandatory GDPR webhooks, including shop redaction requests.

Customer redaction requests clear customer email and shipping address fields from stored POD orders associated with the request.

6. Security

We use industry-standard measures such as encrypted transport (HTTPS), access controls, upload validation, and rate limiting. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

7. Your rights and Shopify GDPR webhooks

The App implements Shopify mandatory compliance webhooks for customer data requests, customer redaction, and shop redaction. Merchants and customers may also contact us directly regarding access, correction, or deletion requests related to data processed by the App.

8. International transfers

We may process and store information in countries other than where you or your customers are located. We take steps designed to protect information in accordance with this policy.

9. Children

The App is intended for merchants running online stores and is not directed to children under 16.

10. Changes

We may update this policy from time to time. We will post the revised version on this page and update the "Last updated" date. Material changes may also be communicated through the App or by email where appropriate.