Privacy Policy

Your privacy is important to us. This policy explains how we collect, use, and protect your information.

This privacy policy was last updated on 1/20/2026. For questions about our privacy practices, please contact support.

Information We Collect


Account Information

When you install and use our app, we collect:

  • Your Shopify store name and domain
  • Shopify access tokens (required for API access)
  • Subscription and billing information
  • Usage statistics and job history

Third-Party Service Credentials

If you choose to connect external services:

  • Google Drive: We store OAuth tokens (access and refresh tokens) to access your Google Drive account. These tokens are encrypted and stored securely.
  • FTP Servers: We store FTP connection credentials (host, port, username, password) that you provide. These are encrypted and used only for file transfers.

Product and Image Data

We temporarily process product information and images during upload and export operations. This data is:

  • Processed in real-time and not permanently stored
  • Used only for the specific operation you request
  • Not shared with third parties except as necessary for the service

How We Use Your Information


We use the information we collect to:

  • Provide and maintain the Bulk Image Upload service
  • Process image uploads and exports as requested
  • Manage your subscription and billing
  • Monitor service usage and enforce package limits
  • Provide customer support and respond to inquiries
  • Improve our service and develop new features
  • Send important service updates and notifications

Data Security


We take data security seriously and implement industry-standard measures to protect your information:

  • Encryption: All sensitive data, including OAuth tokens and FTP credentials, are encrypted at rest and in transit
  • Access Control: Access to your data is restricted to authorized personnel only
  • Secure Storage: Data is stored in secure, encrypted databases with regular backups
  • API Security: All API communications use HTTPS and secure authentication
  • Token Management: OAuth tokens are automatically refreshed and can be revoked at any time

Third-Party Services


Google Drive

When you connect Google Drive, we use Google's OAuth 2.0 API. Your Google account data is subject to Google's Privacy Policy. We only access:

  • Files and folders you explicitly select for upload/export
  • Basic file metadata (name, size, type) for matching purposes

You can disconnect Google Drive at any time, which will revoke our access to your account.

Shopify

Our app integrates with Shopify's API to access your store data. This integration is governed by Shopify's Partner Program Agreement and API Terms of Service. We only access:

  • Product information (titles, SKUs, barcodes) for image matching
  • Product images for upload and export operations
  • Store settings necessary for app functionality

Data Retention


We retain your information for as long as necessary to provide our services:

  • Account Data: Retained while your account is active and for 30 days after account closure
  • Job History: Retained for 90 days for troubleshooting and support purposes
  • OAuth Tokens: Retained until you disconnect the service or revoke access
  • FTP Credentials: Retained until you remove the FTP configuration
  • Billing Information: Retained as required by law for accounting and tax purposes

Your Rights


You have the right to:

  • Access: Request a copy of the data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your data (subject to legal requirements)
  • Disconnect Services: Disconnect Google Drive or remove FTP settings at any time
  • Uninstall: Uninstall the app, which will trigger data deletion procedures
  • Opt-Out: Opt out of non-essential communications

To exercise these rights, please contact our support team.

Cookies and Tracking


We use session cookies and authentication tokens to maintain your login session and provide secure access to the app. These are essential for the app to function and are not used for tracking or advertising purposes.

Children's Privacy


Our service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

Changes to This Policy


We may update this privacy policy from time to time. We will notify you of any material changes by:

  • Posting the updated policy on this page
  • Sending an email notification to the address associated with your account
  • Displaying a notice in the app

The "Last Updated" date at the top of this page indicates when the policy was last revised.

International Data Transfers


Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. We ensure that appropriate safeguards are in place to protect your data in accordance with this privacy policy.

Questions About Privacy?

If you have any questions or concerns about this privacy policy or our data practices, please contact us