Privacy Policy

Overview

Image Alt Text AI Generator (the “App”) helps Shopify merchants generate clear, accessible alt text for product images. This policy explains what data the App processes, what we store, and how we respect privacy rights.

Data the App processes

• Shop information needed to install and operate the App.
• Product data required to create alt text (for example: product titles, image URLs).
• Usage metrics necessary to enforce plan limits (for example: number of AI generations).

Data the App stores

• Shop session and authorization details required to connect to Shopify.
• Subscription/plan status and simple usage counters (generations used per period).

What the App does not store

• Customer personal information (PII) such as customer names, emails, addresses, or order contents.

How AI generation works

To generate alt text, the App may send image URLs and minimal product context to an AI provider solely for the purpose of producing alt text. We do not include customer data in these requests.

Legal bases and purpose limitation

We process data only to provide, secure, and improve the App: generating alt text, enforcing usage, and supporting billing. Processing relies on your installation and use of the App and our agreement to provide the service.

Data retention

We retain shop session, subscription, and usage records only as long as necessary for the App to function. When a shop uninstalls the App, we receive a shop/redact webhook and delete stored shop data except where retention is legally required.

Security

We use industry-standard safeguards and Shopify’s authentication to protect access tokens and shop data.

Data subject rights and compliance webhooks

The App implements Shopify’s mandatory compliance webhooks (customers/data_request, customers/redact, shop/redact). If the App receives a valid request, we acknowledge it and act accordingly. Because the App does not store customer PII, there is typically no customer data to return or delete.

International transfers

Data may be processed in regions where our infrastructure or service providers operate. We take appropriate measures consistent with applicable laws.

Contact

For privacy questions or requests, contact: [email protected]