Privacy Policy

Last updated: April 2026

POZR AI ("POZR", "we", "our", or "us") provides AI-powered product imagery and video tooling for Shopify merchants. This Privacy Policy explains what data we collect from merchants who install the POZR AI Shopify app, how we use it, and how long we keep it.

What We Collect

Shopify store domain (the *.myshopify.com domain of the installing merchant).
OAuth access token issued by Shopify so we can read the merchant's own products and write generated media back to those products.
Product metadata and images belonging to the merchant (title, handle, product image URLs) used as source material for AI generation.
Generated images and videos produced by POZR at the merchant's request, stored in Supabase Storage or Amazon S3.
Usage metadata (counts of generations, plan tier, billing state) used to enforce plan limits and billing.

What We Do Not Collect

POZR AI does not collect, store, or process any personally identifiable information belonging to the merchant's customers. We do not receive customer names, emails, addresses, order data, or payment data. The app has no access to Shopify customer resources.

How We Use Your Data

We use the collected data solely to provide the service: generating AI imagery and video for the merchant's own products, displaying those assets inside the app, applying selected assets back to the merchant's Shopify product listings (on explicit merchant action), and enforcing plan limits and billing.

Data Retention & Deletion

When the app is uninstalled from a Shopify store, we immediately invalidate the store's sessions. Shopify then sends a shop/redact webhook approximately 48 hours later, at which point POZR permanently deletes all remaining data associated with that store — generation history, presets, usage records, subscription records, and the generated media stored in Supabase/S3.

Merchants can request deletion at any time before the 48-hour window by emailing us at the address below.

Subprocessors

POZR uses the following third-party services to deliver the app: Shopify (platform), Supabase (database and storage), Amazon Web Services (storage and compute), Vercel (hosting), and the AI model providers we use for image and video generation. Each subprocessor receives only the data strictly needed to perform its function.

Security

Shopify access tokens and session data are stored in an encrypted Postgres database. Access to production systems is restricted and transmission is secured via TLS.

Your Rights

Merchants may request access to, correction of, or deletion of their stored data at any time. Shopify's standard GDPR compliance webhooks (customers/data_request, customers/redact, shop/redact) are implemented and honored.

Changes

We may update this policy as the service evolves. Material changes will be reflected by updating the "Last updated" date above.

Contact

Questions or requests: bill+pozr@cooliodev.com.