Privacy policy

Last updated 23 August 2026

This app scans a merchant’s storefront for accessibility problems and writes alt text to product images. It does not collect data about a store’s customers, and it cannot: it holds only the read_products, write_products and write_files permissions, so orders, checkout and customer records are outside its reach entirely. The last of those exists for one reason: Shopify stores alt text on the media file rather than on the product, so writing a description needs it.

What we take from Shopify

Product titles, vendor, product type, and the URLs, dimensions and existing alt text of product images. We write alt text back to those images. Nothing else is read or written.

What the merchant gives us directly

The app’s own settings, and — only if the merchant chooses to enter it — the storefront password for a store that is not yet open to the public, so that scans can reach real pages instead of the password screen. It is never shown back on any page, is scrubbed from error messages, and is deleted when the app is uninstalled.

What we collect by visiting the storefront

Scans open public storefront pages the way a shopper’s browser would. We store the page addresses visited and, for each accessibility problem found, a short truncated fragment of the markup that caused it, so the report can point at the exact element.

Who else sees this data

Generating alt text means sending the product image and its title to an AI provider. We use Anthropic PBC (United States) for that, and, where an operator has configured it as a paid fallback, Google LLC (United States). Only the image and the product’s public descriptive fields are sent. We do not permit providers to train models on this data, and we do not use free API tiers where a provider reserves that right. No data is sold, and no other third party receives it.

How long we keep it

Scans and their reports are deleted after 12 months. Alt text suggestions are deleted 90 days after they are applied — the text itself then lives on the product in Shopify, not here. A scheduled job enforces both; they are not aspirations.

Uninstalling the app deletes the stored access credentials and the storefront password immediately. A merchant can erase everything at any time from Settings → Delete all app data, and Shopify’s own erasure requests are honoured within 30 days.

Where it is processed

On our servers in Europe, and at the AI providers named above, which process in the United States.

Contact

Questions, or a request to see or delete data: peter.tolkachev@gmail.com.