This Privacy Policy describes how MC Product Personalizer ("MC Product Personalizer," "we," "us," or "our"), a product operated by OctoAI Commerce Services, collects, uses, and discloses personal information when a Shopify merchant ("Merchant," "you") installs and uses our application (the "App") on the Shopify platform, and when a Merchant's customers ("Customers") interact with the personalization features made available through the App on the Merchant's storefront.
By installing or using the App, you agree to the collection and use of information in accordance with this Privacy Policy.
1. Personal Information We Collect
When you install the App, we are automatically able to access certain types of information from your Shopify account, including:
Merchant account information: your name, store name, store URL, email address, physical address, and other contact or billing details provided through Shopify.
Store and product data: information about your products, product options, orders, and collections needed to configure and display personalization options.
Additionally, we collect the following information from Customers who use the personalization features on your storefront:
Personalization data: text, images, photos, fonts, colors, and other custom content that a Customer submits or uploads while personalizing a product.
Order-related information: the personalization details linked to a specific order, such as the customized design and product options selected.
Device and usage information: information about the browser and device used to access the App's personalization widget, such as IP address, browser type, and general usage patterns, collected automatically as the Customer interacts with the widget.
We refer to Merchant account information, store data, and Customer information collectively as "Personal Information" in this Privacy Policy.
2. How We Use Your Personal Information
We use the Personal Information we collect to:
Provide, operate, and maintain the App's product personalization features, including generating live previews of customized products;
Process and fulfill personalized orders, and transmit personalization files/data to the Merchant or the Merchant's connected fulfillment partners (such as print-on-demand providers) as instructed by the Merchant;
Communicate with Merchants regarding their account, app updates, billing, and customer support requests;
Improve, test, and develop new features of the App;
Detect and prevent fraud, abuse, or security incidents; and
Comply with applicable legal obligations.
We do not use Customer personalization data (such as uploaded photos) to train third-party AI models, and we do not use it for advertising or marketing purposes unrelated to fulfilling the Customer's order.
3. Sharing Your Personal Information
We do not sell Personal Information. We may share Personal Information with the following categories of recipients, only as necessary to operate the App:
Shopify: the App operates on the Shopify platform, and certain data is shared with Shopify in accordance with Shopify's own Privacy Policy.
Service providers: third-party vendors that help us provide hosting, storage, analytics, customer support, or payment processing, who are bound by confidentiality and data protection obligations.
Print-on-demand and fulfillment partners: where a Merchant connects the App to a fulfillment provider, personalization data (such as uploaded images or custom text) is shared with that provider solely to produce and ship the customized order.
Legal and safety purposes: we may disclose Personal Information where required to comply with the law, respond to lawful requests from public authorities, or protect the rights, property, or safety of MC Product Personalizer, our Merchants, or others.
Business transfers: if we are involved in a merger, acquisition, or sale of assets, Personal Information may be transferred as part of that transaction, subject to the commitments made in this Privacy Policy.
4. Cookies & Similar Technologies
The App's personalization widget may use cookies, local storage, and similar technologies on the Merchant's storefront to remember a Customer's in-progress design, maintain session state during checkout, and understand basic usage patterns for reliability and performance monitoring. These technologies do not track Customers across unrelated third-party websites. Customers can control cookies through their browser settings; disabling cookies may limit some personalization features.
5. Your Rights & Choices
Depending on your location, you may have certain rights regarding your Personal Information, which may include the right to:
Request access to, or a copy of, the Personal Information we hold about you;
Request correction of inaccurate or incomplete Personal Information;
Request deletion of your Personal Information, subject to legal or contractual retention requirements;
Object to or restrict certain processing of your Personal Information; and
Where applicable (e.g., under the EU/UK GDPR or California CCPA/CPRA), request data portability or opt out of certain disclosures.
Merchants can exercise these rights, or ask us to action a request on behalf of their Customers, by contacting us using the details in Section 12. We will respond within the timeframe required by applicable law. We do not discriminate against any individual for exercising these rights.
6. Data Security
We implement reasonable technical and organizational measures designed to protect the Personal Information we process, including encryption of data in transit, access controls, and regular security reviews. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Data Retention
We retain Personal Information only for as long as necessary to fulfill the purposes described in this Privacy Policy, including providing the App's services, complying with legal obligations, resolving disputes, and enforcing our agreements.
Order-related personalization data is generally retained for up to twelve (12) months from the date the order is created, unless earlier deletion is requested by the Merchant.
Customer-uploaded files (such as photos submitted for personalization) are automatically and permanently deleted after ninety (90) days, unless earlier deletion is requested by the Merchant.
Merchant account information is retained for as long as the App remains installed on the Merchant's store, and for a reasonable period thereafter as needed for legal, accounting, or record-keeping purposes.
When a Merchant uninstalls the App, we delete or anonymize the associated Merchant and Customer Personal Information within thirty (30) days, except where retention is required by law or to resolve disputes.
8. International Data Transfers
Your Personal Information may be transferred to, stored, and processed in countries other than the country in which it was originally collected. When we transfer Personal Information internationally, we take steps to ensure that appropriate safeguards are in place to protect the information in accordance with applicable data protection laws.
9. Children's Information
The App is not directed at children, and we do not knowingly collect Personal Information from children. If you believe we have inadvertently collected information from a child, please contact us so that we can promptly delete it.
10. Third-Party Links and Services
The App may contain links to, or integrate with, third-party websites or services (such as fulfillment partners). We are not responsible for the privacy practices of these third parties, and we encourage you to review their privacy policies before providing any Personal Information to them.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the updated version on this page and revise the "Last updated" date above. Your continued use of the App after any changes constitutes your acceptance of the updated Privacy Policy.
12. Contact Us
If you have any questions about this Privacy Policy, or would like to exercise any of the rights described in Section 5, please contact us: