GemHues for Shopify — Privacy Policy

Last updated: 2026-10-21

GemHues ("we", "the App") lets Shopify merchants generate product images with AI and write them back to their products. This policy explains what data the App processes and why.

What we collect

Data	Why	Where stored
Shop domain (`*.myshopify.com`)	Identify the installing store; map to the generation account	App database
Shopify access token (offline)	Read products / write generated media on the merchant's behalf	App database (Shopify session storage)
Product images the merchant selects	Sent to our image-generation backend to produce a new image	Processed transiently; the generated result is stored on our CDN (Cloudflare R2)
Generation usage counts (timestamp + feature, per shop)	Enforce plan quotas (daily/monthly caps)	App database
Image-set generation tasks (product ID, task status, links to the generated images)	Let you come back after closing the page and still pick which generated images to add to your product; reconcile quota usage	App database, kept while the App is installed
Review-request record (when the App last asked your store for an App Store review, and Shopify's response code)	Avoid asking again within 30 days	App database

What we do NOT collect

No buyer / customer personal data. The App requests only the read_products, write_products and write_files scopes. write_files is used solely to upload the description images you choose to publish into your store's Shopify Files, so they are served from Shopify's own CDN. The App never reads, stores, or processes your customers' names, emails, addresses, or orders.

Data processing & sub-processors

Selected product images are sent over a secured server-to-server API to the GemHues image-generation backend (our own infrastructure), which calls upstream AI image providers to produce the result. Source images are passed for the sole purpose of generating the requested image.
We do not sell or share merchant data with third parties for advertising.

Data retention & deletion

On app uninstall: the merchant's Shopify session (access token) is deleted, and the shop→account mapping is deactivated.
On shop/redact (sent by Shopify 48 hours after uninstall): we erase the App-side store data we hold — usage records, image-set generation tasks, the review-request record, and any remaining session rows for that shop.
customers/data_request / customers/redact: because the App holds no customer personal data, there is nothing to return or delete; we acknowledge these requests.
Accounting / cost records generated on our backend (image-generation cost logs, keyed to an internal synthetic account, containing no customer PII) are retained as financial records under our legitimate interest, consistent with applicable law.

Contact

For privacy questions or data requests: support@gemhues.com