Hotspot Studio (“the App”) helps Shopify merchants create shoppable images. This policy describes what data the App processes when a merchant installs it and when shoppers interact with it on a merchant’s storefront.
What we collect — merchants
- Store-level configuration: your shop domain, the sections, images, hotspots, style presets and settings you create in the App, and your subscription plan.
- Order attribution records: when a shopper buys through one of the App’s hotspots, we store the order id, the products/variants and line totals involved, and which section/hotspot produced the sale. We do not read or store customer names, emails, phone numbers, addresses, or any other customer personal data.
What we collect — storefront visitors
Storefront analytics are fully anonymous aggregate counters (views, clicks, add-to-carts, device class derived from the browser’s user-agent string). The App sets no cookies, stores no visitor identifiers, and does not collect IP addresses.
What we collect — this website
The contact form on this site stores the message you send, the topic you pick, your name if you give one, the email address you leave for the reply, and your IP address (kept solely for abuse prevention and rate limiting). The message, with those same details, is also delivered to our support inbox by email so we can answer it.
The site uses Google Analytics to measure aggregate traffic, but only if you accept the analytics banner, which shows until you choose — decline it and no analytics script is loaded at all. When accepted, Google sets its own cookies and processes the data under Google’s privacy policy. You can change your mind at any time: open the analytics preferences (also linked in every page footer) to withdraw consent — the Google Analytics cookies are removed and the banner asks again. Your light/dark theme choice — and the analytics answer itself — are kept in your own browser’s storage and never leave it.
Why we process this data
Solely to provide the App’s features: rendering your shoppable sections and showing you sales analytics. We do not sell data, use it for advertising, or share it with third parties beyond the processors below.
Processors & storage
Data is stored in a managed PostgreSQL database at our hosting provider, encrypted in transit (TLS) and at rest. Shopify Inc. processes data as the platform the App runs on. When you use AI Pin Assist, the image you choose, the product titles, product types and store tags from your catalog, small images of candidate products, your store’s language and any catalog notes you add are sent to Anthropic (Claude API); caption drafts also include where your hotspots sit on the image. Your product titles and types, a short description of each item found in the photo (plus any catalog notes you add), cropped regions of that image and your product images are sent to Voyage AI (a MongoDB company) to match them. Both process the data solely to generate the suggestions — never to train AI models — and do not retain it afterwards. Contact-form and support messages are sent through Resend (email delivery) and received in a Zoho Mail inbox. This website is served by Cloudflare.
Retention & deletion
Data is retained while the App is installed. When you uninstall and Shopify issues the
mandatory shop/redact request, we permanently delete all data for your
store. Because we store no customer personal data,
customers/data_request is acknowledged with nothing to return. On a
customers/redact request we delete the order-scoped revenue-attribution
records (order id, products and line totals — no personal fields) tied to that
customer’s orders.
Contact
Questions about this policy or your data: [email protected] — or use the contact form.