Privacy Policy

1. The short version

We collect the minimum we need to run the Customizer and billing. We don't sell personal data.

2. What we collect

Account data (name, email, Shopify store URL). Billing data (processed by Shopify Billing — we never see card numbers). Usage data (which features are used, error logs) so we can improve the product and fix bugs.

Design content includes uploaded photos and artwork, entered text, AI prompts, source and style-reference images, and generated images. We process this content to create and save designs and produce print-ready files. If you connect your own OpenAI API account, we store your API key encrypted and use it on our backend to authenticate generation requests.

3. How long we keep things

Account and order data stay while your account is active. Print-ready order files are retained long enough to fulfill the order, with a buffer for reprints and disputes. Error logs roll off after 30 days.

4. Your rights

You can ask us to show you the personal data we hold about you or your customers, correct it, or delete it. Email hey@pixelwrangler.io and we'll action it within 30 days.

We honor Shopify's GDPR webhooks automatically: when a customer asks a store for their data or its deletion, and when a store uninstalls the app, we receive Shopify's data request, customer redaction, and shop redaction notifications and act on them — customer designs, uploads, and order records tied to the request are exported or erased accordingly.

5. Store owners we reach out to

We sometimes email store owners who have not heard of us, to introduce the Customizer. For that we collect business contact details — a business name, a role or first name, a business email address and the store's website — from publicly available sources: the store's own website and public app directories. We use them for that introduction only. We don't sell them or share them beyond the providers listed below.

Those emails are plain text, from a real person, at most one short sequence, with no open or click tracking. Every one says where we found your address and how to stop. Reply "unsubscribe" — or just say so — and we remove the address within five working days, in practice the same day, and we won't write to it again. Ask and we'll stop contacting your whole company.

If you are in the UK or the EU, our basis for this is legitimate interests: a relevant business-to-business introduction sent to a published business address. You can object at any time by replying or emailing hey@pixelwrangler.io, and we will stop and delete your details. We keep these details only while they are accurate and useful, and we check addresses with an email verification service before we write.

6. Third parties we use

Shopify (billing + store integration), AWS (hosting + file storage), Supabase (database), Sentry (error monitoring), and for the outreach above, Instantly (sending and address verification). Each is bound by its own data-protection terms.

OpenAI provides Image Generation, Word Art and Style Remix when those features are available and used. For an OpenAI generation request, our backend sends OpenAI the prompt (including entered words and style instructions), any source or style-reference images needed for that request, generation settings, and a pseudonymous account identifier. This applies to both merchant-generated assets and shopper-generated designs. When a merchant has connected their own OpenAI API account, we send these requests using that account.

OpenAI processes these inputs and generated outputs under its API data-handling policies and the controls applicable to the OpenAI account used. See OpenAI's API data controls for processing and retention details.

7. Contact

Questions about privacy — or any data request — go to hey@pixelwrangler.io. A real human answers. We update this page when our practices change, and note the date at the top.