Privacy Policy

Effective Date: April 6, 2026

Last Updated: April 6, 2026

1. Introduction

InstaLabel ("we," "our," or "us") is an application designed to help merchants create, manage, and display smart product labels and badges on their Shopify storefronts. The app offers AI-powered label recommendations, customizable badge designs, rule-based label targeting by product or collection, and performance analytics.

This Privacy Policy describes how we collect, use, store, and protect information when you install and use InstaLabel through the Shopify App Store. By installing the app, you agree to the practices described in this policy.

2. Information We Collect

2.1 Store & Account Information

  • Shopify Store Domain: Collected during installation and used to identify your store throughout all app operations.
  • Shopify Access Token: Issued by Shopify upon installation; used exclusively to authenticate API requests on your behalf. Stored securely and never exposed to third parties beyond what Shopify's platform requires.
  • Merchant Contact Details: Name and email address as provided through Shopify, used for support and service communications.

2.2 Content You Create

  • Label & Badge Content: Label text, badge styles, icons, and custom designs you create or configure within the app.
  • Targeting Rules: Product, collection, tag, and condition-based rules you define to control which labels display where.
  • AI Recommendation Inputs: Product metadata (title, tags, type) submitted to generate AI-powered label suggestions.
  • Display Settings: Styling, positioning, animation, and visibility configurations for your storefront label widget.

2.3 Usage & Performance Data

  • Feature Usage Logs: Actions performed within the app such as label creation, AI recommendation requests, rule configuration, and widget setting changes.
  • AI Credit Activity: Records of AI credit consumption per action (label generation, recommendations) and credit purchase history.
  • Error & Performance Logs: System error logs, API response times, and health metrics used to maintain app reliability.
  • Browser & Device Information: Browser type, operating system, and IP address when accessing the app admin panel within Shopify.

2.4 Storefront Analytics

  • Label Impression Counts: Aggregated, anonymized counts of how many times each label or badge is displayed on your public storefront.
  • No Visitor PII: We do not collect, store, or process any personally identifiable information about your store's end customers or visitors.

3. How We Use Your Information

3.1 Core App Functionality

  • Store and render product labels and badges on your Shopify storefront via the app widget and theme extension.
  • Manage label targeting rules, ordering, and publishing state across products and collections.
  • Generate and suggest label content using AI (requires and deducts AI credits).
  • Apply condition-based label logic including inventory level, sale status, tags, and custom metafields.
  • Enforce plan-based limits (e.g., maximum active labels, number of rules) according to your active subscription tier.

3.2 Analytics & Insights

  • Display dashboard statistics including total labels, storefront impression counts, active rules, and top-performing badges.
  • Provide trend data (7-day / 30-day) to help you understand label visibility and performance across your storefront.

3.3 Service Operations & Improvement

  • Diagnose and fix technical issues, errors, and performance bottlenecks.
  • Monitor system health and ensure uptime of the app and storefront widget.
  • Develop and test new features and improvements.

3.4 Communications

  • Respond to merchant support requests and technical queries.
  • Send transactional notifications related to your subscription, AI credit balance, or important service changes.
  • Notify you of material updates to this Privacy Policy.

4. Information Sharing & Disclosure

We do not sell, rent, or trade your personal information to any third party.

4.1 Service Providers

We share limited data with trusted providers who help us operate the app:

  • Shopify: Store authentication and session management as required by Shopify's platform.
  • AI Service Providers: Product metadata you submit for AI label generation or recommendations is transmitted to our AI provider for processing. Content is processed transiently and not retained by the provider beyond the scope of the request.
  • Cloud Infrastructure Providers: App backend, database, and file hosting services used to run InstaLabel.
  • Customer Support Tools: Platforms used to manage and respond to merchant support tickets.

All third-party providers are bound by data processing agreements that restrict use of your data to service delivery purposes only.

4.2 Legal Obligations

We may disclose information when required to:

  • Comply with applicable law, regulations, or legal process (e.g., court orders, subpoenas).
  • Respond to lawful requests from government or regulatory authorities.
  • Protect the rights, property, or safety of InstaLabel, our users, or the public.

4.3 Business Transfers

If InstaLabel undergoes a merger, acquisition, or sale of assets, your data may be transferred to the successor entity. We will notify affected merchants in advance of any such transfer.

5. Data Security

5.1 Security Measures

We apply industry-standard safeguards to protect your data, including:

  • Encryption of all data in transit via HTTPS/TLS.
  • Encryption of sensitive data at rest.
  • Access controls ensuring only authorized personnel can access production systems.
  • API authentication using Shopify-issued session tokens, validated on every request.
  • Regular security reviews and dependency audits.

5.2 Data Retention

  • Label Content & Settings: Retained for as long as the app is installed on your store.
  • Analytics & Usage Logs: Retained on a rolling 90-day basis.
  • AI Credit Logs: Retained for the lifetime of your active subscription.
  • Post-Uninstallation: All store-associated data is permanently deleted within 30 days of app uninstallation, triggered by Shopify's app/uninstalled webhook.
  • Legal Hold: Data may be retained beyond the above periods if required to comply with applicable law.

6. Your Rights & Choices

6.1 Data Access & Control

As a merchant using InstaLabel, you have the right to:

  • Access the label content and settings stored for your store at any time through the app.
  • Export your label and rule data using the built-in export feature.
  • Request correction or deletion of your data by contacting our support team.
  • Request a copy of personal data we hold about you.

6.2 Managing Your Data In-App

  • Edit, reorder, publish, or delete any label or badge from the Label Manager.
  • Create, modify, or remove targeting rules from the Rules settings.
  • Update badge appearance, position, and animation in Widget Settings.

6.3 Uninstallation

  • Uninstalling the app from your Shopify admin immediately removes the storefront widget and initiates data deletion from our systems within 30 days.
  • You may contact us to request expedited deletion.

7. Storefront Visitors

The InstaLabel widget is rendered on your public storefront through a Shopify theme extension. When your store's customers view product pages with active labels:

  • We record only an anonymized increment to the impression counter for each label or badge displayed.
  • No names, emails, IP addresses, or any other personally identifiable information belonging to your store visitors is collected, transmitted to, or stored by InstaLabel.
  • No tracking cookies or fingerprinting scripts are placed on your storefront by this app.

8. International Data Transfers

InstaLabel is operated from India. Your data may be processed by cloud infrastructure or service providers located in other countries. Where such transfers occur, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses (SCCs) as approved by relevant data protection authorities.
  • Data processing agreements with all sub-processors establishing equivalent protection standards.
  • Compliance with applicable cross-border data transfer regulations including GDPR Chapter V requirements.

9. Children's Privacy

InstaLabel is a business tool designed exclusively for Shopify merchants and is not directed at individuals under the age of 13. We do not knowingly collect personal data from children. If we become aware that such data has been collected, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When material changes are made, we will:

  • Post the updated policy at this URL with a revised "Last Updated" date.
  • Display an in-app notice within the Shopify admin panel.
  • Where required by law, obtain your consent before applying changes.

Continued use of the app following the effective date of any update constitutes acceptance of the revised policy.

11. Compliance

This Privacy Policy is designed to comply with applicable data protection laws and platform requirements, including:

  • GDPR — General Data Protection Regulation (EU/EEA)
  • CCPA — California Consumer Privacy Act (USA)
  • PIPEDA — Personal Information Protection and Electronic Documents Act (Canada)
  • PDPB — India's Personal Data Protection framework
  • Shopify Partner Program Requirements — including data minimization, webhook-triggered deletion, and transparent disclosure obligations

GDPR Legal Bases for Processing

  • Contract Performance: Processing necessary to deliver the app services you have subscribed to.
  • Legitimate Interest: Service improvement, error monitoring, and security.
  • Consent: AI processing of your product data for label generation and recommendations.
  • Legal Obligation: Where retention or disclosure is required by law.

CCPA Data Categories Collected

  • Identifiers: Store domain, account email address.
  • Commercial Information: Subscription plan, AI credit purchases and balances.
  • Internet Activity: App feature usage, label impression analytics.
  • Professional Information: Business name and merchant contact details.