Privacy policy

What we handle

• Your store's identity: its myshopify.com address, its plan with us, its primary language, and the settings you choose in the app.
• Access to your store: the access token Shopify issues to the app at install, and the identifier of the store's app session (for example offline_your-store.myshopify.com). The token is stored encrypted (AES-256-GCM, with the key kept outside the database) and used only to create the products you publish and to put them on your Online Store.
• Staff sessions: when someone on your staff opens the app, Shopify sends a short-lived session token. We use it to check that the request comes from your store, and we don't store it. We don't keep staff names, e-mail addresses or passwords.
• Your products: the photos you take or upload, the note you type, the listing text written from them, your edits, the price you enter, the cleaned-up photos, and the product's id in your store.
• Scene photos: the background images you ask for, and the one you choose for your product.
• Voice notes (🎤 on the phone page): your phone's browser turns your speech into text with its own speech service (for example Google's on Android, Apple's on iPhone). We receive only the text, never the recording.
• Usage and records: how many products were written each month (for your plan), and an internal log of what happened, such as "listing 42 published". The log holds only numbers and short codes: never product text, names, e-mail addresses or phone numbers.

What we don't handle

• Your customers' data. The app asks Shopify only for these permissions: write_products, write_publications, write_inventory, read_locations, read_locales, and write_translations only if you turn on Store languages in Settings (Shopify asks you to approve it then). It can create and publish products, set their stock, cost and weight, read your store's locations and languages, and write the translations of the products it published; it cannot read orders, customers or payments.
• We use no advertising or analytics trackers and no tracking cookies.
• Shopify's customer data requests (customers/data_request and customers/redact) are answered: we hold no customer data.

Why we use it

• To write your listing, clean up your photos, and create the product in your store when you tap Publish. Nothing is published without your tap.
• To run Store Shield, which refuses products that carry a known brand's name or logo, and flags possible look-alikes for you to check.
• To count usage against your plan, to bill through Shopify, and to keep the service safe and working.

We do not sell or share personal information (as the California Consumer Privacy Act defines those words), we don't use it for targeted advertising, and we don't use your photos or products for advertising.

Who else processes it

• Anthropic PBC (United States): your photos and your note are sent to Anthropic's Claude model, which writes the listing and, when you ask or turn on Store languages, translates it. Under Anthropic's commercial terms, data sent through its API is not used to train its models.
• fal (Features & Labels, Inc., United States), for two features. Scene photos: fal receives only our own fixed description of a background, never your photo, your product's name or your words; your product is placed into the background on our own server. Cut-out help: when our own background removal is busy, your product photo (re-encoded, without its name, note or metadata) is sent to fal to separate the product from its background; it is kept out of fal's request history, returned to us directly, and any file fal writes expires within an hour.
• Google LLC (Google Cloud Vision, United States): for Store Shield, up to four of your product photos, resized, are checked for logos and printed words before the listing is written. Google receives the photos only, never your note, your words or your store's name.
• netcup GmbH (Germany): hosts our servers, our database and the photo storage.
• Shopify Inc. and its affiliates: the platform the app runs in. Products are created in your Shopify store, and charges are billed by Shopify.

We will update this list before we add another processor.

International transfers

We are in Israel, which the European Commission recognizes as giving personal data adequate protection. Our servers are in Germany (EU). Anthropic, fal and Google process data in the United States. Those transfers rely, where applicable, on the EU-U.S. Data Privacy Framework where the provider is certified under it, and otherwise on the European Commission's Standard Contractual Clauses (with the UK addendum for UK data), as set out in each provider's data processing terms.

How long we keep it

• Photos are deleted once they are 30 days old and the product no longer needs them: it was published, discarded, not listed by Store Shield, or could not be written. A product still waiting for you (for your review, or on hold until you tap Check again) keeps its photos until you publish or discard it. Discarding a product in the app deletes its photos at once.
• The listing records (the text, your edits, the price and the product's id in your store) are kept while the app is installed, so you can see what was made.
• Backups of the database and the photos are made every night and kept for 14 days, then deleted.
• When you uninstall the app, the access token is deleted at once. Shopify asks us to erase the store's data 48 hours later (shop/redact); we then delete the store's record, its products' records and photos, its settings and its usage. Only the internal log remains, with the store's identity removed.
• Products you published are in your Shopify store and remain yours; deleting them there is up to you.

WooCommerce stores

• Access: when you approve the request on your own store's WooCommerce screen, WooCommerce creates a read and write REST API key and sends it to us. We store it encrypted (AES-256-GCM, with the key kept outside the database). WooCommerce offers no narrower choice that can create products. We use the key only to read your store's general settings and language, and to create and update the products you publish with their categories and tags. We do not use it to read orders or customers.
• The plugin: the optional CamToCart plugin only adds a page with links to our service. It makes no calls of its own and stores nothing. Pressing one of its buttons opens our site with your store's address and your admin language in the link.
• Pictures: WooCommerce takes a picture by downloading it from a web address. So for each picture of a product you publish we keep a temporary copy behind a private link that works for 15 minutes. The copy is deleted within 3 hours and is not in our backups.
• Disconnecting: when you disconnect in CamToCart, our copy of the key is deleted at once. Drafts and photos for that store are deleted after 48 hours, unless the store connects again before that. Removing the plugin does not disconnect the store. To remove the key from your store too, open WooCommerce > Settings > Advanced > REST API and press Revoke. If the key stops working, we disconnect the store ourselves after repeated failures. Products you published stay in your store and remain yours.

Everything above applies to a WooCommerce store too, with these differences.

Wix sites

• Access: when you add CamToCart to your site, you approve the permissions Wix shows: read the site's basic and business details, manage the Media Manager, and read and manage Wix Stores products. We hold no key or password of yours. When we need to call Wix for your site, Wix gives our server a short-lived token from CamToCart's own app credentials; we keep it only in memory, for a few hours at most. We use this access only to read your site's language and your plan with us, to bring the pictures of the products you publish into your Media Manager, and to create and update those products. We do not read orders, customers or payments. The basic details Wix shares also include your business contact details and the site owner's Wix login e-mail; we do not use or store them.
• Signing in: when you open CamToCart from your Wix dashboard, Wix tells us which site it is and that you may manage it. CamToCart then opens in a new tab with a session that lasts up to 8 hours. We don't keep names, e-mail addresses or passwords.
• Pictures: Wix brings a picture into your Media Manager by downloading it from a web address. So for each picture of a product you publish we keep a temporary copy behind a private link that works for 15 minutes. The copy is deleted within 3 hours and is not in our backups.
• Billing: paid plans are bought on Wix's own pricing page and charged by Wix. From Wix we read only which plan your site has.
• Removing the app: when you remove CamToCart from your site, Wix tells us and we stop at once. Your site's records, its products' records and its photos are deleted after 48 hours, unless the app is added again before that. Products you published stay in your Wix store and remain yours.
• Wix.com Ltd. and its affiliates take Shopify's place in the list above for a Wix site: the platform the app runs in, where your products are created and which bills the plans.

Everything above applies to a Wix site too, with these differences.

Security

All traffic is encrypted (TLS). The access token is encrypted at rest. Every request between the app's parts is signed and checked, and each store can reach only its own data.

Data processing agreement

For the data in what your store sends us, you are the controller and we are your processor. Our data processing agreement sets this out, with the full list of subprocessors, and is part of our terms.

Data processing agreement

Your rights

You can ask for a copy of the data we hold about your store, or ask us to correct or delete it, by writing to support@camtocart.com. We answer within 30 days. Where the GDPR, the California Consumer Privacy Act or a similar law applies, you have the rights it gives, including the right to complain to your data protection authority (in Israel, the Privacy Protection Authority).

Changes

When this policy changes we post the new version here with a new date, and we tell you in the app about important changes.

Contact

L.M Media, Israel. support@camtocart.com

Terms of service · Data processing agreement