Atelier Ready app privacy policy

Information the app handles

• Shop information. Your shop’s myshopify domain and Shopify ID, the access token and permissions Shopify grants to the app (read and write products), your Atelier Ready plan or free-trial status, and AI credit usage. We also keep the shop contact email that Shopify provides, and the contact email you confirm when you start a free trial. We use them only for service, trial and storage notices. We don’t collect staff names or staff email addresses.
• Product images and text. Artwork and mockup images you upload, the previews and thumbnails we make from them, filenames, image roles, alt text, titles, descriptions, sizes, finishes, frames, prices, SKUs, and the IDs of draft products the app creates in your Shopify admin.
• Brand voice and preferences. Brand profiles, writing style, words to use or avoid, product defaults and saved workflows.
• Support and service records. Messages you send us, support references, and service logs that we use to keep the app running and to fix problems.

The app does not access or store your customers’ personal information or your orders. Your browser may store display preferences for the app, such as layout and autosave settings. These aren’t used for tracking.

We get shop information from Shopify when you install the app. Everything else comes from you as you use the app or contact us.

How we use information, and our legal bases

We use this information to provide the app and the features you choose (performance of our contract with you), to keep the app secure and fix problems (our legitimate interests), to send service and storage notices (contract), and to meet legal obligations. We don’t sell your information, use it for advertising, or use your content to train AI models. We don’t make decisions about anyone based solely on automated processing that have legal or similarly significant effects. AI suggestions are only suggestions, and you decide whether to use them.

Service providers

We use these providers to run the app. Each one processes information only to provide its service to us.

• Shopify. Signs you in to the app, manages billing for app plans, and receives the product information and images you choose to send as draft products. It also delivers messages sent through the contact form on atelierready.com. Publishing products is your decision. See Shopify’s privacy policy.
• Microsoft Azure (UK South region). Hosts the app, its database, private image storage (encrypted at rest, accessed only over HTTPS), service logs and secret storage. Service and storage emails are sent through Azure Communication Services (Europe data location). See the Microsoft privacy statement.
• OpenAI (United States). We contact OpenAI only when you ask for an AI suggestion, such as a title, description or alt text. We send previews of the selected images, not your original files, together with the relevant brand-voice and listing details. We send these requests with OpenAI’s response storage turned off. OpenAI doesn’t use data sent through its API to train its models, but it may keep request data for up to 30 days to monitor for abuse before deleting it. See OpenAI’s API data controls. You can always write and edit listings without AI.
• Apple (iCloud Mail). Handles email sent to our support and general addresses. See Apple’s privacy policy.

When information is transferred outside the UK or the European Economic Area, for example to OpenAI in the United States, we rely on the provider’s data processing terms, including the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, or on the UK Extension to the EU–US Data Privacy Framework where the provider is certified under it.

How long we keep information

Free trial. The free trial lasts 7 days. If it ends and you haven’t chosen a paid plan, you have a 14-day grace period to subscribe or download your images. During the grace period you’ll see a notice in the app, and we’ll email the contact address you confirmed when you started the trial about 3 days before deletion. A trial can’t start without a confirmed contact email, so that you always get this notice. If an email can’t be delivered, we hold the deletion until it has been resolved. If you still haven’t subscribed by the end of the grace period, we may permanently delete your images, saved listings and drafts, brand voice, settings and saved workflows. We keep only a minimal record (your shop domain and Shopify ID, the fact that you used a free trial, and the trial and deletion dates) so a trial can’t be repeated. Your trial contact email is removed at the same time. That record is deleted when Shopify asks us to delete your shop’s data (see “Uninstalling” below). Products you’ve already sent to Shopify stay in your Shopify admin; we never delete them.

Paid plans. Working images are kept for up to 60 days from upload, or longer if you add extra storage (an optional recurring add-on, billed through Shopify). If your subscription ends, you have 30 days to download your images before they’re deleted. Saved listings, brand voice and settings are kept while the app is installed, so you can pick up where you left off. In the app you can download or remove your working images at any time.

Uninstalling. At any point, including during a trial or a grace period, uninstalling the app immediately removes our access to your shop. 48 hours later Shopify sends us a shop-deletion request, and we then permanently delete everything we hold for your shop: images, listings, drafts, brand voice, settings, trial and usage records, and the minimal trial record. This happens normally within the hour and always within 30 days. We keep only a receipt showing that the deletion was completed (shop domain and dates). We need it to prove the request was handled, and it also stops a repeat free trial.

Backups and logs. Deleted information can remain in encrypted backups until they expire on their normal cycles: up to 14 days for the database, 7 days for image storage and 30 days for service logs. We don’t restore deleted data from backups except to recover from a service failure.

Shopify privacy requests (GDPR)

The app handles Shopify’s mandatory privacy webhooks:

• Shop deletion (shop/redact): we delete your shop’s data as described under “Uninstalling”.
• Customer data requests and customer deletion requests (customers/data_request, customers/redact): the app holds no information about your customers, so there’s nothing to return or delete. We acknowledge each request and record that it’s complete.

Your rights

Depending on where you live, including the UK and the European Economic Area, you can ask us to:

• give you a copy of your information, or provide it in a portable format;
• correct it, delete it, or restrict our use of it;
• stop using it, where we rely on our legitimate interests.

Email support@atelierready.com. We’ll verify the request comes from the shop owner and respond within one month. If you’re unhappy with how we handle your information, you can complain to the UK Information Commissioner’s Office (ico.org.uk) or to your local data protection authority.

Your artwork

You keep all rights to your artwork and content. Using the app doesn’t transfer ownership to us; we process your content only to provide the app. Only upload content you own or have permission to use, and review AI suggestions before you apply them.

Security

We use private storage, encryption at rest and in transit, and checks that each request comes from the right shop. This isn’t end-to-end encryption: our services and providers have to process your content to run the app, and authorised staff may access it for support or security.

Children

The app is for businesses and isn’t intended for children.

Changes to this policy

When the way we handle information changes, we’ll update this page and the date at the top. We’ll tell you in the app about significant changes.