Last updated: 2026-06-28
Product Studio ("the App", "we", "us") is a Shopify app that plans
deals-montage video-ad timelines from a merchant's product catalog. This policy
explains exactly what the App accesses, why, how long we keep it, and your
rights. We collect the minimum needed to do one job and nothing more.
Product Studio is operated by the App developer. For any privacy question or
request, contact us at the email in Section 11.
Product Studio requests a single Shopify Admin API scope:
read_products — product titles, prices, compare-at prices, and featuredimage URLs.
That is the entire access surface. The App does not request, and is
structurally unable to read or write:
read_orders / write_orders, read_customers / write_customers,checkouts, or any order/customer/financial data;
write_products or any write scope — the App cannot modify your store;Product Studio is Protected Customer Data Level 0. It processes no
protected customer data (no customer PII, no order data). Because it touches
only catalog data, it falls outside Shopify's PCD opt-in requirement.
myshopify.com domain, install/uninstall timestamps, andyour billing/plan status.
ciphertext, never the plaintext token.
transitions, and the real price-drop badges (the product title and the
before/after price for badged scenes). We store the resulting plan, not a full
copy of your catalog.
your plan quota and to deduplicate webhooks. No customer PII.
We do not store orders, customers, payment details, or any personally
identifiable customer data — we never receive it.
Solely to provide the App: read your catalog on demand to plan a montage
timeline, show which products are deal-ready, enforce your plan quota, and
display insights over your own planning history. We do not sell or share your
data, and we do not use it for advertising or profiling.
The shipped App is deterministic: montage planning is plain computation, not
machine learning. No large-language-model or AI provider processes your data,
so there is no AI sub-processor today. If a future feature (e.g. an optional MP4
render or AI imagery) introduces one, this policy will be updated before that
feature ships and the sub-processor will be named in Section 8.
your history.
shop/redactrequest we cascade-delete all rows for your shop (shop, token, plans,
scenes, usage, webhook audit).
customers/data_request and customers/redact arehonored as no-ops because we hold no customer data to return or erase.
Redis datastores (EU/region as configured). Data is processed only to operate
the App.
No AI/LLM sub-processor is used by the current App (see Section 6).
Access tokens are encrypted at rest (AES-256-GCM). All Shopify traffic is over
HTTPS/TLS. Inbound webhooks are HMAC-verified and deduplicated. Access is limited
to operating the App.
You may request access to, correction of, or deletion of the data we hold for
your shop, and you may object to or restrict processing. The fastest route to
deletion is to uninstall the App (or trigger a shop-redaction); you may also
contact us directly. We respond within the timeframes required by applicable law.
Privacy requests and questions: privacy@productstudio.syncerp.work
(or the support email listed on the App Store listing).
We will post any changes here and update the "Last updated" date. Material changes
that affect what we access or who processes your data will be reflected before the
relevant feature ships.