Privacy Policy

Green13 Product Personalizer — a Shopify app by Green13 srl. Version 1.0, last updated: 15 October 2026.

The app keeps only what a store needs to make personalized products: the texts, choices and photos a customer enters to personalize a product, the previews made from them and the production files of each order. It never reads customers' names, email addresses, postal addresses or phone numbers, and never sells, shares or uses personal data for advertising, profiling or any other purpose.

Who is responsible

The merchant who installs the app is the data controller for their customers' data. Green13 srl processes that data on the merchant's behalf, only to provide the app, as a data processor, under our Data Processing Addendum (Article 28 GDPR), which applies to every merchant who installs the app. Contact: info@green13.agency.

What the app does

Green13 Product Personalizer adds a personalizer to the product pages of a Shopify store, inside the store's own theme. Customers write a text, choose a font, a color or other options set up by the merchant, and see a live preview of the product, view by view. When they add the product to the cart, the app saves their choices (the "design"), draws the preview images on its own server and adds a link to them in the cart line. When the order is placed, the app makes the production files of each view and saves them in the merchant's Shopify Files, where the merchant finds them from the order page.

Data customers enter in the personalizer

Texts and choices	The texts a customer writes (which may include names, for example a name to print) and the font, color and options they choose. The app checks them again on its own server against the merchant's settings and draws the images from them.
Photos	When the merchant offers photo upload, the image the customer uploads and the crop they choose. Location and other metadata (EXIF) are removed from the image.
Language	The store language the customer was using, to show the personalizer in that language.

The app does not ask customers who they are. When a customer is logged in to the store, Shopify adds their customer ID to the requests the store sends to the app: the app does not use it and does not store it.

Data the app reads from Shopify

Orders	When an order is placed, Shopify sends it to the app. The app reads only the order ID, number and date and the order lines with a personalization, to make the production files and to count the personalized orders of the month for the merchant's plan.
Customers' names, email addresses, addresses and phone numbers	Never read. The app does not request these fields from Shopify, so they are not available to it, and nothing about who placed an order is stored.

The app also reads store data that is not about customers: products and variants, files and languages, and the status of the merchant's subscription.

What the app stores

Designs	For each personalized product added to a cart: the texts, choices and photos entered, the product and variant, the store language and the date; once it is ordered, the ID of the order and of the order line. A design is not linked to a customer.
Previews	The preview image of each view of a design, on the app's server. They are shown through a link with a random identifier that cannot be guessed, which the app writes in the cart line and which stays in the order.
Production files	For each view of an ordered design, an image and a vector file, saved in the merchant's Shopify Files. The app keeps its own copy on its server for 30 days after the files are saved in Shopify.
Personalized orders	Order ID, order number, month and the personalized lines of each order, to count the orders of the merchant's plan and to show any problem to the merchant.
Store settings	Font and color sets, templates with their views and fields, the products they are assigned to, the extra price of a personalization and references to the merchant's files in Shopify Files.
Authentication session	The access token Shopify issues to keep the app installed. It holds no data about the merchant's customers.

The app does not collect payment details, passwords, dates of birth or any special category of data, and IP addresses are not stored: limits against abuse are kept in memory only. It uses no analytics, advertising or tracking of any kind.

Where it is stored and who can see it

Storage	A database and the disk of the app's server, hosted by Aruba S.p.A. in Italy (European Union). Production files are also saved in the merchant's Shopify Files, which are part of the merchant's store.
Security	All traffic to and from the app uses HTTPS. Requests from the store and from Shopify are verified with signatures. The app never uses an image sent by the browser: it draws every preview and production file itself, from the merchant's settings and the values entered.
Backups	Nightly backups of the database, encrypted before they leave the server. They are kept for 14 days on the app's server and an encrypted copy for 90 days on Green13's own server in Italy. Preview images and file copies are not in the backups.
Who can see it	The merchant's staff, in their Shopify admin and on the order page. The customer who personalized the product, through the preview link in their cart and order. Green13 accesses the data only when needed to fix a problem.
Shared with third parties	No. Data is exchanged only with Shopify, through Shopify's own APIs, to read products and orders and to save the production files in the merchant's store. The hosting provider (Aruba S.p.A., Italy) is the only sub-processor.
Sold or used for advertising	Never.

Green13 uses no other provider, and the data is not transferred outside the European Union. Shopify, which runs the merchant's store and keeps the merchant's Shopify Files, works for the merchant under the merchant's own agreement with it.

How long it is kept

Designs added to a cart that never becomes an order: deleted, with their previews, 30 days after they were saved.
The app's own copies of the production files: deleted 30 days after the files are saved in the merchant's Shopify Files. The files in Shopify Files belong to the merchant's store and stay there until the merchant deletes them.
Designs of orders: for as long as the app is installed, so that the production files can be made again if needed.
When the merchant uninstalls the app, the personalizer disappears from the store at once. All of that store's data and files on the app's server are deleted when Shopify sends the shop redaction request, 48 hours after the uninstall (shop/redact).
When a customer asks the store to be forgotten, the designs of the orders Shopify lists in the request are deleted, with their previews and file copies, as soon as Shopify forwards it (customers/redact). Orders in the merchant's Shopify store are handled by Shopify.
Backups roll over: deleted data disappears from them within 90 days at most.

Customers' rights

Customers exercise their rights (access, correction, erasure) by contacting the store. When the merchant forwards a request through Shopify, the app compiles every design it holds for the orders listed in the request (customers/data_request); erasure requests (customers/redact) are carried out automatically. Customers may also write to info@green13.agency. In the EU you can lodge a complaint with your data protection authority.

Changes to this policy

If the app starts to process new data, this page will be updated before that change is released, and the version and date above will change.

Contact

Green13 srl — Via della Resistenza 129/c, 20090 Buccinasco (MI), Italy
VAT IT14697160969 — REA MI 2801512 — info@green13.agency