Privacy Policy

Last updated: September 18, 2026

AE : Product Option (“the App”, “we”, “us”) provides custom product options, AI virtual try-on and AI product video generation to merchants using Shopify. This policy explains what personal information the App collects and processes when a merchant installs it, and when shoppers use its features on that merchant’s storefront.

1. Information we collect

From merchants (when you install the App)

• Store information from Shopify: shop domain, store name, store contact and owner name / email, phone, country, currency, timezone, Shopify plan and primary domain.
• Account and session data: the access tokens Shopify issues to the App, and basic details of the staff user who opens the App (name, email, locale).
• App configuration: your settings, custom option / form definitions, onboarding progress, plan and usage counts.
• Your AI provider API key, if you choose to bring your own (e.g. deAPI or Google Gemini). It is encrypted at rest (AES-256-GCM), never logged and never sent back to the browser.
• Product data (titles, images, media) that you choose to use for try-on or video generation, and videos you publish to your products.
• Billing status: your subscription plan and charge reference. Payments are processed by Shopify; we never see card details.

From shoppers (on the merchant’s storefront)

• Try-on photos. When a shopper uses virtual try-on, the photo they upload is sent to an AI provider to generate the try-on image. It is held only temporarily while the job runs (no longer than about one hour) and is not saved to our database.
• Custom option / form submissions. Values a shopper enters into custom product options (for example engraving text, a gift message or an uploaded file) are stored so the merchant can fulfil the order.
• Order information. When an order is placed, we receive order details from Shopify (order number, line items, prices and the custom option properties attached to them, and the customer’s ID / email where present) to link personalisations to the order and verify their price.

2. How we use information

• To provide the App’s features: custom options, try-on and video generation.
• To authenticate you, keep your settings, and apply your plan and usage limits.
• To link personalised line items to orders and detect price tampering.
• To provide support and communicate with you about the App.
• To keep the App secure, prevent abuse, and fix problems.

We do not sell personal information, use it for advertising, or use shopper photos to train AI models.

3. How we share information

We share data only with service providers needed to run the App:

• Shopify — the platform the App runs on, and billing.
• AI providers (deAPI, or Google Gemini if the merchant selects it) — receive the images needed to generate a try-on or video.
• Hosting and infrastructure (Fly.io application hosting, managed database, queue and file storage providers).
• Integrations you enable — if a merchant generates an API key for a connected app (such as Account Editor), that app can read the merchant’s order personalisation data. The key is revoked when the App is uninstalled.

We may also disclose information if required by law or to protect our rights and the security of the App.

4. Data retention and deletion

• Try-on photos are not stored beyond the temporary processing window.
• Generated videos are held temporarily (about one hour) for download unless you publish them to your store.
• When you uninstall the App, your sessions are deleted and connected-app keys are revoked. About 48 hours later Shopify sends a shop/redact request and we delete your settings, encrypted API key, custom forms and all their submissions and uploaded files, and remove contact details from our records.
• We honour Shopify’s customers/data_request and customers/redact requests for shopper data held in custom option submissions.

5. Security

Data is sent over HTTPS, requests from Shopify are verified by signature, and sensitive credentials are encrypted at rest. Access to production systems is restricted. No method of transmission or storage is completely secure, but we work to protect your information.

6. Your rights

Depending on where you live (for example under the GDPR or CCPA/CPRA), you may have the right to access, correct, delete or port your personal information, or object to its processing. Merchants can contact us at the address below. Shoppers should contact the merchant they bought from — the merchant controls their store’s data, and we act on the merchant’s instructions through Shopify.

If you are in the EEA or UK, your information may be processed outside your country, including in the United States, with appropriate safeguards in place.

7. Children

The App is intended for businesses and is not directed to children under 16. We do not knowingly collect their personal information.

8. Changes to this policy

We may update this policy from time to time. The “Last updated” date above shows when it last changed.

9. Contact us

Questions or requests about privacy: support@accounteditor.com