Privacy policy for the Shopify app

Controller

MMR Labs GmbH, Carl-Benz-Straße 6, 89269 Vöhringen, Germany. HRB 22254, Amtsgericht Memmingen. Email: info@liquiflow.app

Scope

This policy applies to the Shopify app AI Image Labels: EU AI Act. The app helps merchants visibly label AI-generated and AI-modified images in their store and record every decision. The users of the app are the merchant and their staff. Visitors to the store see the labels but do not connect to us (see “Store visitors”).

Overview

• No customer data, no order data.
• No staff names or email addresses.
• No tracking, no analytics, no advertising, neither in the app nor in the store.
• Servers in the EU (Helsinki, Finland). The app does not transfer data to third countries.
• After uninstalling, all of the store's data is deleted.

Data the app processes

The Shopify user ID is a number Shopify uses to identify a staff account. We do not store names or email addresses: the app works with sessions that carry no personal details. The ID lets the merchant see in the log which account made a decision.

Product images may show people. The app reads image files only to evaluate their metadata. If the merchant downloads a copy with the label burned in, the server creates it in memory and does not store it.

The app requests only these Shopify permissions: read_products, write_products, read_files, write_files, read_themes, read_locales. Products and files are read and given metafields, AI notes and, if the merchant chooses, an addition to the alt text; themes and languages are only read.

Data the app does not process

• No customer data and no order data. The app requests neither read_customers nor read_orders and no access to protected customer data.
• No staff names or email addresses.
• No tracking, no analytics, no advertising cookies, neither in the admin nor in the store. The app loads no third-party scripts.

Store visitors

Label, script and texts are part of the app's theme extension and are served by the Shopify CDN; the details for each image are stored as metafields in the store. A visitor does not connect to any server of the app, and we receive no data about them. No cookies are set.

To keep the label readable on light and dark images, the script measures the brightness under the label in the browser and keeps the result in the browser's session storage for the duration of the visit (key kibl-g:). These are brightness values only, not personal data. They never leave the device and are deleted when the tab is closed.

The line in checkout and on the order confirmation is created by a checkout extension that Shopify runs. It sends nothing to us.

Legal basis

• Merchant data, settings, image details and classifications: performance of the contract for using the app (Art. 6(1)(b) GDPR).
• Log with user ID and technical server logs: legitimate interest in traceable proof and secure operation (Art. 6(1)(f) GDPR).
• Brightness values in session storage: strictly necessary to display the label the merchant requested in a readable way (Section 25(2) no. 2 TDDDG).

Recipients

• Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, Ireland, as the platform on which the store and the app run. Shopify's own privacy policy applies to Shopify.
• Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, as processor for the application and database. Server location Helsinki, Finland.

The app does not transfer data to countries outside the EU.

Retention

• On uninstall, we delete the store's access tokens immediately.
• All other data is kept for 48 hours, so that an accidental uninstall does not immediately destroy the merchant's work. Shopify then requests deletion via shop/redact, and the app deletes all of the store's data: settings, images, evidence, classifications, backup copies and log.
• If that request does not arrive, for example because a store was closed instead of uninstalling the app, we delete the data no later than 90 days after uninstalling.
• Database backups are overwritten after 30 days. Until then, deleted data may still be contained in a backup.
• Technical server logs (error messages, no data about store visitors) are overwritten continuously, at most 30 MB per service.
• Backup copies of original files are deleted once the original is restored, at the latest together with the store's other data.

Requests via Shopify

The endpoints required by Shopify, customers/data_request, customers/redact and shop/redact, are in place. As there is no customer data, the first two acknowledge the request without storing customer data. shop/redact deletes the store's data.

Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability (Art. 15 to 20 GDPR).

Right to object: Where we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR). An informal email to info@liquiflow.app is enough.

You can also lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

Last updated: 12 October 2026. We will update this policy when the app changes.