Legal

Privacy Policy

Last updated: February 18, 2026

1. Introduction

Welcome to SnapDescribe ("we", "our", or "us"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use our Shopify application that automatically generates product descriptions from product images using artificial intelligence.

By installing and using SnapDescribe, you agree to the practices described in this policy. If you do not agree, please uninstall the application.

2. Information We Collect

2.1 Merchant Account Data

When you install SnapDescribe from the Shopify App Store, we collect and store the following information about your Shopify store:

  • ›Shop domain and name
  • ›Shopify access token (required to read and update product data)
  • ›Subscription tier and billing status
  • ›Credit balance and usage history
  • ›Installation and uninstallation timestamps

2.2 Product Data

To provide the description-generation service, we access and temporarily process:

  • ›Product titles and existing descriptions
  • ›Product image URLs (publicly accessible Shopify CDN URLs)
  • ›Generated description content before it is written back to Shopify

To provide you with a history of your AI-generated content, we store the generated titles, descriptions, and tags in our secure database. This data is retained for as long as the app is installed on your store, allowing you to review and reuse your generations. Product images themselves are never stored — only the text output produced from them.

2.3 Usage Data

We automatically collect limited technical information to operate and improve the service, including API request logs, error logs, and aggregate usage statistics. These logs are retained to support the service and are reviewed periodically for security and performance purposes.

3. How We Use Your Information

We use the collected information solely to:

  • ›Authenticate your store and provide the core AI description service
  • ›Track credit usage and manage your subscription plan
  • ›Respond to support requests and troubleshoot issues
  • ›Send transactional emails related to your account (e.g., credit balance alerts)
  • ›Comply with legal obligations

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Third-Party Services

4.1 OpenAI

SnapDescribe uses the OpenAI API to analyse product images and generate descriptions. When you trigger a generation,SnapDescribe downloads the product image from Shopify's CDN, converts it into a secure Base64-encoded data string, and transmits that data directly to OpenAI's API for analysis. No image URLs are shared with OpenAI during this process.

OpenAI does not use data submitted via the API to train its models. API data is subject to OpenAI's API Data Usage Policy.

4.2 Supabase (Database)

Merchant account information, credit balances, and subscription records are stored in a Supabase database hosted on secure cloud infrastructure. Supabase employs industry-standard security measures including encryption at rest and in transit.

4.3 Shopify

As a Shopify app, we operate within Shopify's platform. Your use of Shopify is subject to Shopify's own Privacy Policy.

5. Data Retention

We retain your store data for as long as your SnapDescribe account is active. If you uninstall the application, we will delete your store's personal data within 30 days, except where we are required to retain it for legal or billing compliance purposes.

API request logs and aggregate usage statistics are retained to support the service and are reviewed periodically. We will implement automated retention schedules and notify you of any changes to this policy.

6. Data Security

We implement appropriate technical and organisational security measures to protect your information against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • ›TLS/HTTPS encryption for all data in transit
  • ›Encryption at rest for stored credentials and tokens
  • ›Access controls limiting who can view merchant data
  • ›Regular security reviews of our infrastructure

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. GDPR Compliance

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) and applicable local law:

  • ›Right of access – request a copy of the personal data we hold about you.
  • ›Right to rectification – request correction of inaccurate data.
  • ›Right to erasure – request deletion of your personal data.
  • ›Right to restriction – request that we limit processing of your data.
  • ›Right to data portability – receive your data in a structured, machine-readable format.
  • ›Right to object – object to processing based on legitimate interests.

To exercise any of these rights, contact us at privacy@visualyzelabs.com.

7.1 Mandatory Shopify GDPR Webhooks

SnapDescribe fully implements Shopify's mandatory GDPR webhook endpoints:

  • ›customers/data_request – Upon receiving a customer data request from a merchant, we identify and return any personal data we hold related to that customer.
  • ›customers/redact – Upon receiving a customer redact request, we permanently delete or anonymise any personal data associated with that customer within 30 days.
  • ›shop/redact – Upon receiving a shop redact request (triggered 48 hours after app uninstall), we permanently delete all personal data associated with the merchant's store.

8. Cookies

SnapDescribe runs inside the Shopify Admin and does not set first-party cookies on your storefront. Shopify and embedded app infrastructure may set session-related cookies as part of their standard operation.

9. Children's Privacy

SnapDescribe is a business application intended for merchants and is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, where appropriate, notify you via email or an in-app notice. Your continued use of SnapDescribe after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your data, please contact us at:

SnapDescribe by Visualyze Labs
Email: privacy@visualyzelabs.com