Privacy policy
ProductStudio by Chavez Technologies · Last updated October 7, 2026
ProductStudio by Chavez Technologies is an all-in-one customizer for Shopify. Installing the app accepts this policy and the Terms of Service. Questions go to jmchavez2029@gmail.com. We do not sell personal information. We do not request customer name, email, phone, or address.
Shop connection
We store these fields for each shop that installs the app, so we can call Shopify for that store and no other:
- Shop domain, such as example.myshopify.com. It selects that shop’s products, settings, and webhooks.
- Offline access token and, when Shopify issues one, the refresh token. They authorize Admin API calls. The refresh token renews an expiring offline token.
- Granted scopes, and the time the app was installed.
- Subscription plan name (ProductStudio), status, and whether the charge is a test. Shopify Billing charges $60.00 USD every 30 days. We do not store a card number.
Designer setup
We store the shop’s customizer setup so the storefront can show and price the product: product names, garment images, print areas, colors, sizes, prices, the shop logo, theme colors, and font files the merchant uploads. Those files are kept for that shop only.
Customer designs
A customer’s words, uploaded pictures, chosen color, and size quantities are sent to Shopify as line item properties so the shop can print the order. We also render a print-preview image per designed side and send that URL to Shopify. We do not keep a separate customer database, and we do not receive the customer’s name, email, phone, or address. The in-progress design stays in that browser’s local storage until the customer adds it to the cart.
Checkout pricing
Text and image extras are charged as a separate unlisted Design fee product in the shop’s own catalog. The shirt stays at its catalog price, and the fee lines are added to the same cart. The visible Pricing property lists each charge. A quantity break, which changes the shirt’s unit price, opens a Shopify draft-order invoice instead. We read only the draft id and the invoice URL. We do not read a customer name, email, phone, or address from the draft. We do not keep the draft as our own record. If Shopify returns an id without an invoice URL, we delete that draft once and do not create another. If that priced checkout cannot be opened, the shirt is not added at the catalog price.
Orders and Metrics
When a merchant opens Orders or Metrics, we read that shop’s orders from Shopify: the order number (Shopify’s order name, such as #1001, which is not a customer’s name), the date, fulfillment status, order and line totals, the product title, and the design attributes on the line. We do not read customer name, email, phone, or shipping or billing address. We do not save a separate copy of the order.
Cookies
After install, the app sets an httpOnly cookie with the shop domain so the embedded admin opens the right shop. It is not used for advertising.
Privacy webhooks
The app verifies Shopify’s HMAC signature on webhooks. customers/data_request and customers/redact are recorded as the topic and the time we received them. There is no customer profile to export or erase; the design is on the Shopify order the shop already has. app/uninstalled and shop/redact delete that shop’s stored data and token.
How long we keep it
Data is kept only while the app is installed and needed to run the customizer. Uninstalling the app, and a shop redact request, delete that shop’s access token, refresh token, products, settings, compliance log, uploaded images and fonts that belong to the shop, and print previews recorded for the shop. Another shop’s files are left in place. Deleting the app’s copy does not delete the order Shopify already stored for the merchant.
Encryption
The app is served over HTTPS, and calls to Shopify use HTTPS, so data is encrypted in transit. In production, shop files and JSON are stored in a private Vercel Blob store, which encrypts them at rest. A local development copy stays on that computer’s disk.