GemHues for Shopify — Privacy Policy

Last updated: 2026-06-17

GemHues ("we", "the App") lets Shopify merchants generate product images with AI and write them back to their products. This policy explains what data the App processes and why.

What we collect

Data	Why	Where stored
Shop domain (`*.myshopify.com`)	Identify the installing store; map to the generation account	App database
Shopify access token (offline)	Read products / write generated media on the merchant's behalf	App database (Shopify session storage)
Product images the merchant selects	Sent to our image-generation backend to produce a new image	Processed transiently; the generated result is stored on our CDN (Cloudflare R2)
Generation usage counts (timestamp + feature, per shop)	Enforce plan quotas (daily/monthly caps)	App database

What we do NOT collect

No buyer / customer personal data. The App requests only read_products and write_products scopes. It never reads, stores, or processes your customers' names, emails, addresses, or orders.

Data processing & sub-processors

Selected product images are sent over a secured server-to-server API to the GemHues image-generation backend (our own infrastructure), which calls upstream AI image providers to produce the result. Source images are passed for the sole purpose of generating the requested image.
We do not sell or share merchant data with third parties for advertising.

Data retention & deletion

On app uninstall: the merchant's Shopify session (access token) is deleted, and the shop→account mapping is deactivated.
On shop/redact (sent by Shopify 48 hours after uninstall): we erase the App-side store data we hold — usage records and any remaining session rows for that shop.
customers/data_request / customers/redact: because the App holds no customer personal data, there is nothing to return or delete; we acknowledge these requests.
Accounting / cost records generated on our backend (image-generation cost logs, keyed to an internal synthetic account, containing no customer PII) are retained as financial records under our legitimate interest, consistent with applicable law.

Contact

For privacy questions or data requests: support@gemhues.com