Data & security
What the app keeps for your store, how it’s protected, how long it stays and how it’s deleted. The full legal wording is in the privacy policy.
How long it’s kept
| What | Kept |
|---|---|
| Designs that are never bought, with their files | 30 days |
| Designs on orders | While the app is installed, so you can remake or reprint |
| Activity records, including the access log | Rolled up after 180 days |
| AI credit and billing records | 13 months, for billing questions |
| Closed bug reports | 90 days |
| Customer names and addresses | Not kept: read from Shopify when you open a page that shows them |
When your data is deleted
You uninstall
Shopify tells us 48 hours later, and everything the app keeps for your store is deleted.
A year without a plan
If the app stays installed with no plan for 365 days in a row, everything it keeps for your store is deleted. We email the store owner a month and a week before; nothing is deleted until both emails have gone out. Choosing a plan stops the clock.
Never touched
Your Shopify store: products, orders and pictures in your Shopify Files stay yours either way.
Who else handles it
| Service | What it does | What it receives |
|---|---|---|
| Shopify | The store platform, billing and file storage | Your store’s data lives in or passes through Shopify |
| Render (United States) | Hosts the app and its database | The data the app keeps |
| Email delivery service | Account emails, like the notices before data is deleted | Your store’s name and owner email, when an email is due |
| Recraft | AI pictures, cut-outs and vector art, only when used | The picture or prompt, with no names or contact details |
| Anthropic | AI writing for titles and descriptions, only when used | The product details, with no customer data |
Data requests
Shoppers ask the store they bought from. When Shopify passes on a customer’s request to see or delete their data, the app answers it. Merchants can write to [email protected] for a copy of their store’s data or to have it deleted early.
If something goes wrong
If a security incident affects your store’s data, we tell you without undue delay, and within 72 hours of confirming it, with what happened and what we’re doing about it.
Found a security issue?
Write to [email protected] with the steps to reproduce it. Please don’t test against stores you don’t own.