Privacy Policy

1. Information We Collect

Information from Shopify Merchants

When you install the App on your Shopify store, we collect:

• Account information: Your Shopify store domain, store name, email address, first name, last name, and locale preferences.
• Authentication credentials: Shopify access tokens necessary to operate the App on your behalf.
• Store data: Product information (product IDs, titles, handles, and URLs) when you use product tagging features.
• Theme data: Information about your Shopify theme necessary to integrate gallery widgets into your storefront.

Information from Instagram and Facebook

When you connect your Instagram or Facebook account through the App, we collect:

• Profile information: Your Instagram or Facebook user ID, username, display name, account type, profile picture URL, follower count, following count, and media count.
• Content data: Your Instagram posts including media URLs, captions, timestamps, media type (image, video, or carousel), thumbnail URLs, and engagement metrics (like count, comment count).
• Page information (Facebook connection only): Facebook Page ID, Page name, Page category, and Page access tokens for Pages you manage.
• Access tokens: Instagram and Facebook access tokens necessary to sync your content.

Information We Generate

Through use of the App, we generate and store:

• Widget configurations: Layout settings, styling preferences, sync frequency, and filtering criteria you configure for your gallery widgets.
• AI-generated metadata: When you use our smart search features, we use AI services provided by Google to analyze your Instagram images and generate descriptive metadata including categories, colors, mood, setting, season, and text descriptions. This analysis is performed on publicly available Instagram media URLs.
• Analytics data: Basic widget performance metrics such as view counts and click counts.

Information We Do NOT Collect

• We do not collect personal information from your store's customers or visitors.
• We do not use cookies or tracking technologies on your storefront.
• We do not collect payment or financial information.

2. How We Use Your Information

We use the information we collect to:

• Provide the App's core functionality: Display your Instagram content as customizable gallery widgets on your Shopify storefront.
• Sync your content: Automatically fetch and update your Instagram posts at your configured sync frequency.
• Enable product tagging: Allow you to tag Shopify products on your Instagram media for shoppable galleries.
• Provide AI-powered search: Analyze your Instagram media to enable natural language search and smart categorization of your content.
• Optimize media delivery: Convert and store optimized versions of your images for faster loading on your storefront.
• Maintain and improve the App: Monitor for errors, refresh authentication tokens, and improve App performance and features.
• Communicate with you: Send notifications related to your account, such as sync status updates and approval requests for new media.

3. How We Share Your Information

We share your information with the following categories of third parties, solely as necessary to provide and improve the App:

Service Providers

• Amazon Web Services (AWS): We use AWS for cloud hosting, media storage, and content delivery. Your optimized media files and application data are stored on AWS infrastructure.
• Google: We use AI services provided by Google for image analysis and categorization. No personal information beyond publicly accessible media URLs is shared.
• Error monitoring services: We use error monitoring tools to track application performance. Error logs may contain technical information about your account to help us diagnose issues.

Platform Partners

• Shopify: As a Shopify App, we operate within Shopify's platform and exchange data with Shopify as necessary to provide our services, in accordance with the Shopify App Developer Agreement.
• Meta (Facebook and Instagram): We access Facebook and Instagram data through Meta's official APIs in accordance with the Meta Platform Terms and Meta Privacy Policy.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal process, such as a subpoena, court order, or government request.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. Facebook and Instagram Data Usage

This section specifically addresses our use of data obtained through Meta's Facebook and Instagram APIs, as required by the Meta Platform Terms.

Data We Access Through Meta APIs

• Instagram Business Basic: Profile information and media content from your Instagram business or creator account.
• Instagram Business Manage Insights: Access to engagement metrics and insights for your Instagram account.
• Pages Show List: List of Facebook Pages you manage.
• Pages Read Engagement: Engagement data for your Facebook Pages.
• Pages Read User Content: Content posted on your Facebook Pages.

How We Use Meta Data

1. Display your Instagram content on your Shopify store through gallery widgets.
2. Sync new posts automatically so your storefront stays up to date.
3. Show engagement metrics (likes, comments) on your gallery if you choose to display them.
4. Enable product tagging on your Instagram content for shoppable experiences.
5. Analyze your media using AI for smart categorization and search.

How We Do NOT Use Meta Data

• We do not use Meta data to build profiles of individuals for advertising.
• We do not share Meta data with data brokers or advertising networks.
• We do not use Meta data for purposes unrelated to the App's functionality.
• We do not use Meta data after you disconnect your account, except as required for a reasonable transition period.

Data Retention for Meta Data

• Instagram and Facebook content data is retained for as long as your account is connected and active.
• When you disconnect your Instagram or Facebook account, we mark the account as inactive and cease syncing. You may request permanent deletion of all associated data (see Section 7).
• Expired access tokens are deactivated.

5. Data Storage and Security

We take the security of your data seriously and implement industry-standard measures to protect it:

• All data is stored on secure cloud infrastructure hosted by Amazon Web Services (AWS) in the United States.
• Access tokens and sensitive credentials are stored using encrypted storage services.
• All API communications are encrypted in transit using HTTPS/TLS.
• We implement access controls, rate limiting, and request validation to prevent unauthorized access and abuse.
• Optimized media files are delivered through a secure content delivery network for fast, reliable access.

While we implement industry-standard security measures, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data. If you become aware of a security vulnerability, please contact us immediately at legal@glust.studio.

6. Data Retention

We retain your information for as long as necessary to provide the App's services:

• Active accounts: Data is retained while your App is installed and your accounts are connected.
• Uninstalled App: When you uninstall the App from your Shopify store, we delete your shop authentication data, connected Instagram/Facebook accounts, widget configurations, and associated media records.
• Disconnected social accounts: When you disconnect an Instagram or Facebook account, the account is marked as inactive. Associated data is retained for up to 30 days to allow reconnection, after which it may be permanently deleted.
• Backup data: Copies of data may exist in backup storage for disaster recovery purposes for up to 90 days after deletion.

7. Your Rights and Data Deletion

Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate personal information.
• Deletion: Request deletion of your personal information.
• Portability: Request a portable copy of your data.
• Objection: Object to certain processing of your personal information.
• Restriction: Request that we limit how we use your data.

How to Request Data Deletion

You can request deletion of your data at any time by:

1. Uninstalling the App from your Shopify admin panel, which triggers automatic deletion of your data.
2. Contacting us at legal@glust.studio with a data deletion request. We will verify your identity and process your request within 30 days.
3. Disconnecting your Instagram/Facebook account through the App's settings, which stops all data syncing and marks your social account data for deletion.

For Facebook and Instagram data specifically, upon receiving a verified deletion request, we will delete all data obtained through Meta's APIs associated with your account, including profile information, media content, engagement metrics, and access tokens.

Facebook Data Deletion Callback

In compliance with Meta's Platform Terms, we support Facebook's Data Deletion Request Callback. When you remove the App from your Facebook settings, we receive a deletion request and will delete all data associated with your Facebook account within 30 days. You can check the status of your deletion request by contacting us at legal@glust.studio.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our service providers maintain infrastructure. By using the App, you consent to such transfers. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable laws.

9. Compliance with Data Protection Laws

GDPR (European Economic Area)

If you are located in the European Economic Area (EEA), we process your personal data based on the following legal bases:

• Contract performance: Processing necessary to provide the App's services.
• Legitimate interests: Processing for App improvement and security.
• Consent: Where you have given explicit consent, such as connecting your Instagram or Facebook account.

You may exercise your rights under GDPR by contacting us at legal@glust.studio.

CCPA (California)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of its sale. We do not sell personal information. To exercise your CCPA rights, contact us at legal@glust.studio.

10. Children's Privacy

The App is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will take steps to delete such information.

11. Third-Party Links

The App may contain links to third-party websites or services, including Instagram, Facebook, and Shopify. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies:

• Meta Privacy Policy
• Instagram Terms of Use
• Shopify Privacy Policy

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this policy and, where appropriate, through the App or by email. Your continued use of the App after any changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

ShowPics
Email: legal@glust.studio
Address: 100 N Howard St Ste R, Spokane, WA 99201-0508, United States