Indoxalo privacy policy

Shop data

Shop domain, the access token issued by Shopify, app settings, plan and usage counts. We read product titles and images (read_products). Optional order linking requires read_orders and Shopify approval to access order data.

Shop customers' data

For allowed analytics we retain a reference to the try-on with a successful cart addition. With order linking active we receive a payload limited to identifiers, dates and product lines; we retain only the order ID, matched try-on and payment date. We do not store names, emails, addresses or payment details. Photos are processed as described in the shopper notice.

Providers (sub-processors)

Hetzner Online GmbH (Germany/Finland, EU): application hosting, database and private image storage.

Google LLC – Gemini API (paid tier): automated preview quality checks and generation when configured. Google does not use paid API data to train models.

kie.ai: try-on image generation using the application's configured model.

Cloudflare, Inc.: secure transport (tunnel/TLS) to our servers.

Shopify Inc.: platform, app billing and storefront request proxy.

Retention

Photos: 6 hours by default (configurable 1–24). Results: up to 7 days. Conversion references: 30 days. Privacy request receipts remain available until the shop downloads them. Order IDs in pending requests are cleared 30 days after receipt; downloaded receipts are deleted 30 days after download. We do not copy images to extend retention. On shop/redact we erase the shop's data under the uninstall procedure.

GDPR requests

We support Shopify's mandatory webhooks. Order-linked access requests appear in Analytics for authenticated download of data still retained: the shop must respond to the requester by the deadline; no reply is sent automatically. Erasure requests remove subject links and images, keeping only the credit ledger without images. For a DPA or other requests, write to [email protected].

Security

Private storage with expiring signed links, encrypted transport (TLS), Shopify signature verification on every storefront request, rate limits and restricted administrative access.