Privacy Policy

This Privacy Policy explains how Personalize Design handles personal data and other information collected through our Shopify app, storefront widgets, support channels, and related services.

When we process shopper inputs or order information on behalf of a merchant, we typically act as a service provider or processor for that merchant. The merchant remains responsible for its own customer-facing privacy disclosures and lawful basis for using that data.

Depending on how the Service is used, we may collect:

• Merchant and account data, such as store domain, account identifiers, plan details, billing state, and support contact information.
• Configuration data, such as blueprints, prompts, variables, product mappings, generation limits, and integration settings.
• Shopper personalization data submitted through a merchant storefront, such as uploaded images, entered text, session identifiers, preview jobs, and generated design outputs.
• Order and fulfillment data needed to attach generated assets to orders and route production-ready files.
• Technical data, such as IP address, browser or device metadata, request logs, timestamps, and diagnostics.
• Usage analytics and event data, including pageviews and product usage signals used to understand app performance and adoption.
• Communications you send us, including support requests, feedback, and emails.

We use information to:

• Authenticate users and keep the Service secure.
• Generate previews, process personalization inputs, store design assets, and support fulfillment workflows.
• Provide billing, usage tracking, fraud prevention, abuse detection, and operational reporting.
• Respond to support requests, troubleshoot issues, and communicate about service updates.
• Measure usage, improve the Service, and understand feature adoption.
• Comply with legal obligations, enforce our terms, and protect rights, safety, and property.

We may share information with:

• Platform and infrastructure providers that help us run the Service, such as Shopify, cloud hosting, storage, and email delivery vendors.
• AI and fulfillment partners used to generate assets, process files, or deliver production workflows, such as model providers and print-on-demand integrations.
• Analytics and product measurement providers used to understand Service usage.
• Professional advisers, auditors, insurers, or acquirers where reasonably necessary for business operations.
• Authorities, regulators, rights holders, or counterparties when required by law, legal process, or to enforce our policies.

We do not sell personal information for money. We do not use shopper personalization inputs for advertising profiling.

Merchants control what shopper inputs are requested and what products are sold. If you are a shopper using a merchant's storefront, your relationship is primarily with that merchant. Privacy requests relating to your order, uploaded image, or personalized product should usually be directed to the merchant first.

If we receive a shopper privacy request that we believe is merchant controlled, we may redirect the request to the relevant merchant.

We retain information for as long as reasonably necessary to provide the Service, maintain records, resolve disputes, comply with legal obligations, protect against abuse, and enforce our agreements.

Retention periods may vary depending on the type of data, merchant settings, operational requirements, and whether the information is needed for billing, fraud prevention, or fulfillment records.

We use reasonable technical and organizational safeguards designed to protect information against unauthorized access, loss, misuse, or disclosure. No system is completely secure, and we cannot guarantee absolute security.

The Service may be operated using providers in multiple countries. By using the Service, you understand that information may be processed, stored, and transferred outside your home jurisdiction, subject to applicable legal safeguards where required.

Depending on your location and role, you may have rights to request access, correction, deletion, portability, restriction, or objection to certain processing. Some rights may be limited where exceptions apply.

To make a privacy request, email [email protected]. We may need to verify your identity and, where relevant, coordinate with the merchant that controls the data.

The Service is not directed to children, and we do not knowingly collect personal information directly from children in a standalone consumer context. Merchants are responsible for ensuring their own storefront use complies with applicable child privacy rules.

We may update this Privacy Policy from time to time. The updated version becomes effective when posted unless a later date is stated.