Privacy Policy for AI Photo Studio app on Shopify

Effective date: September 28th, 2025

Codie (“Company”, “we”, “us”, or “our”) provides the AI Photo Studio application (“App”) available on the Shopify App Store. This Privacy Policy explains how we collect, use, store, and disclose information when merchants (“Users”) install and use the App.

By installing or using the App, you agree to the terms of this Privacy Policy.

1. Information We Collect

1.1 From Merchants

When you install and use the App, we may collect the following information through Shopify’s APIs:

Store details (Shopify domain, shop name, shop plan, locale, country).
Contact information (merchant email address).
App usage records (history of AI generations).

1.2 From Customers of Merchants

The App does not access, collect, or process any personal information of merchants’ customers (such as names, addresses, or emails).

1.3 Automatically Collected Data

Technical and transactional logs necessary to provide the service.
In future versions, analytics tools (such as Mixpanel or Google Analytics) may be used to understand usage and improve the App.

1.4 Image Data

The App does not permanently store the original product images. Instead, we process the image using the URL provided from the merchant’s Shopify store.
Images and related prompts are transmitted to Google Gemini (Gemini 2.5 Flash Image Preview API) to generate the modified image.
The final image is uploaded back to the merchant’s Shopify store and stored there.
The App maintains a generation history in our database.

2. How We Use Information

We use the information collected for the following purposes:

To provide and operate the App’s functionality.
To maintain a history of generated images for merchant access.
To communicate with merchants regarding the App, including service announcements, feature updates, and marketing newsletters (soft opt-in, with opt-out option).
To improve and develop the App, including usage analytics in future versions.

We do not sell or share personal information of merchants or customers with third parties for commercial purposes.

3. Data Retention

Merchant account data (email, shop details) and generation history are retained until the User deletes them or requests deletion.
Access tokens are retained only for as long as the App remains installed.
If a merchant uninstalls the App, we may retain limited contact information (email address) for the purpose of communicating important product updates or legal notices, unless the merchant requests full erasure.

4. Data Sharing & Transfers

Images and prompts are transmitted to Google LLC (Gemini API) for processing. Google may process such data on servers located outside the European Economic Area (EEA).
Data is stored on servers provided by Amazon Web Services (AWS) located in the United States.
We may disclose information if required by law, legal process, or government request.

5. International Data Transfers

If you are located in the EEA, United Kingdom, or Switzerland, please note that your data may be transferred outside these jurisdictions (e.g., to the United States). We implement appropriate safeguards such as Standard Contractual Clauses (SCCs) to ensure an adequate level of protection.

6. Data Rights of Individuals

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you.
Request correction, deletion, or restriction of processing.
Object to our processing of your data.
Request data portability.

To exercise these rights, contact us at: kontakt at codie.pl

7. Security

We implement industry-standard security measures to protect data from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Marketing Communications

By installing the App, you agree to receive occasional marketing communications (such as newsletters about new features).

You may opt out of such communications at any time by following the unsubscribe instructions provided in each email.

9. Children’s Privacy

The App is not intended for use by individuals under the age of 16. Merchants are responsible for ensuring that no images of children are uploaded to the App in jurisdictions where this is restricted (e.g., EEA, Switzerland, United Kingdom).

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Updates will be posted within the App or on our website with the “Effective date” revised accordingly.

11. User Content and Ownership

All images generated through the App are based on prompts and inputs provided by the merchant.

Ownership: The merchant retains all rights, title, and interest in and to the images generated using the App. We do not claim ownership over any content generated by merchants.
Responsibility: Merchants are solely responsible for the prompts, inputs, and outputs they create using the App.
No Liability: We are not responsible or liable for the content of generated images, including any potential infringement of intellectual property rights, violations of applicable laws, or misuse by the merchant.

12. Third-Party Services

The App relies on third-party providers, including but not limited to:

Google Gemini API for AI image generation.
Amazon Web Services (AWS) for data hosting and storage.
Shopify APIs for integration with merchant stores.

We are not responsible for the privacy practices or policies of these providers. Merchants should review the privacy policies of these services independently.

13. Limitation of Liability

The App is provided on an “as is” and “as available” basis without warranties of any kind. To the maximum extent permitted by law:

We are not liable for indirect, incidental, or consequential damages, including but not limited to loss of revenue, profits, or business opportunities.
We do not guarantee uninterrupted or error-free operation of the App.
Merchants use the App at their own risk.

14. AI Disclaimer

The App uses artificial intelligence (AI) to generate product images.

We do not guarantee that generated images are free from errors, inaccuracies, or intellectual property issues.
Merchants are solely responsible for reviewing and ensuring that generated images can be lawfully used in their business.
We disclaim any responsibility for misuse or inappropriate use of AI-generated images.

15. Governing Law & Jurisdiction

This Privacy Policy and any disputes related to it shall be governed by and construed in accordance with the laws of Poland, without regard to its conflict of law provisions. Any disputes shall be subject to the exclusive jurisdiction of the courts located in Poland.

16. Contact Information

If you have questions or concerns about this Privacy Policy, you can contact us at:

Email: kontakt at codie.pl