Privacy Policy

Last updated: August 9, 2026

Ez Listify ("we", "us", or "our") provides a Shopify app for merchants. This Privacy Policy explains what information we collect, how we use and share it, how long we keep it, and the choices available to merchants who use the app.

1. Information We Collect

When you install or use Ez Listify, we may collect and process:

  • Shopify store information, such as the store name, myshopify.com domain, and merchant contact email
  • Shopify authentication tokens required to connect the app to the store
  • Product information used by app features, including titles, handles, SKUs, barcodes, metafields, product IDs, and product images
  • Images and filenames you select, folder selections, match results, import settings, image URLs, import status, and import history
  • Google Drive connection information, including the connected account email, OAuth tokens, and the files or folders you choose to browse or import
  • Plan, allowance, credit, subscription, and purchase records needed to provide and bill for the service
  • Technical and security information, such as request timestamps, error logs, and authentication or rate-limit events

Ez Listify currently requests Shopify access only to read and update products. It does not intentionally access customer or order records as part of its normal features.

2. How We Use Information

We use information only as needed to:

  • Authenticate your store and operate the app
  • Browse files you select, match image filenames to products, optimize images, and publish approved product-image changes to Shopify
  • Create temporary backups and provide the limited revert feature when you enable backup
  • Generate editable AI alt text when you request that feature
  • Track import allowances and AI credits, and manage subscriptions and extra packs through Shopify
  • Resume interrupted imports, show import history, troubleshoot errors, prevent abuse, and provide support
  • Maintain service reliability and comply with legal or platform obligations

3. Images, Google Drive, and AI Processing

Images selected from your computer or Google Drive may be copied to temporary object storage and made available through a content-delivery URL so Shopify can fetch and attach them to your products. If backup is enabled, existing Shopify product images may also be copied temporarily so an eligible import can be reverted.

Google Drive access is optional and is used only to let you browse, select, and import the files or folders you authorize. You can disconnect Google Drive inside the app or revoke access from your Google account. Ez Listify's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

When you ask Ez Listify to generate alt text, the selected image and the generation instructions needed for that request are sent to OpenAI's API. The returned alt text remains editable and is not published until you approve the relevant app action. Ez Listify does not use Google Drive data or merchant images to train its own general-purpose AI model.

4. Service Providers

We use the following providers to operate the app:

  • Shopify — App installation, store and product APIs, and billing
  • Google Drive / Google APIs — Access to files and folders you choose to authorize
  • Vercel — Application hosting and request processing
  • Supabase — Database and server-side application records
  • Cloudflare R2 and delivery services — Temporary image storage and delivery
  • OpenAI — AI alt-text generation requested by the merchant

These providers process information only as needed to deliver their services to Ez Listify and are subject to their own terms and privacy commitments.

5. Data Sharing

We do not sell merchant data and do not use it for third-party advertising. We share information only with the service providers listed above, when you direct the app to perform an action, when reasonably necessary to protect the service or investigate abuse, or when required by law. If the business is involved in a merger, acquisition, or sale, information may be transferred subject to applicable law and continued protection of that information.

6. Data Retention and Deletion

Our scheduled cleanup process applies the following normal retention periods:

  • Image backup records and the related revert window: 24 hours
  • Detailed image and product arrays in import sessions: 7 days; summary session records: 30 days
  • Individual AI-credit usage records: 90 days
  • Extra-pack purchase history: 365 days, primarily for billing reconciliation and disputes
  • Short-lived OAuth security states: valid for 10 minutes and removed by security cleanup after use or expiry

Temporary import-image objects are kept only as needed for the import workflow, related app functionality, and operational cleanup. Shop-scoped image objects are deleted when the store's data is redacted.

When we receive Shopify's uninstall webhook, we delete the Shopify access token and Google Drive connection tokens and mark the store as uninstalled. Limited plan, credit, import, and backup records may remain briefly so a merchant can reinstall without immediately losing app state.

Shopify normally sends the required shop-redaction request about 48 hours after uninstall. When we receive that request, Ez Listify deletes the remaining shop-scoped database records and image objects. You may also contact us to request deletion sooner, subject to records we must retain for legal or billing obligations.

7. Security

We use reasonable administrative and technical safeguards designed to protect information handled by the app, including encrypted network connections and restricted server-side access to credentials. However, no method of transmission or storage is completely secure.

8. Cookies and Similar Technologies

We use cookies and similar storage technologies only as needed to keep you signed in, secure authentication flows, remember app sessions, prevent fraud, and operate the app. We do not use them to sell personal data or for third-party advertising.

9. Your Choices and Rights

You can disconnect Google Drive, revoke Google access through your Google account, or uninstall Ez Listify through Shopify. Depending on applicable law, you may also request access to, correction of, export of, or deletion of your information. We may need to verify the request through the store owner or Shopify before acting on it.

10. Shopify Privacy Compliance

We process Shopify's mandatory privacy webhooks for customer data requests, customer redaction, and shop redaction. Because the app does not intentionally collect customer records during normal use, a customer request may return no app-held customer data.

11. International Processing

Ez Listify and its service providers may process information in countries other than your own. Where required, we rely on appropriate safeguards provided by applicable law or our service providers.

12. Changes to This Policy

We may update this Privacy Policy by posting the revised version on this page and changing the "Last updated" date. If a material change requires notice or consent, we will provide it as required before using information for the new purpose.

13. Contact

For privacy questions or requests, email us at support@ezlistify.com.