This Privacy Policy explains what data the VibeTags Shopify app (“VibeTags”, “the app”, “we”, “us”) collects from the merchants who install it, how that data is used, and who it is shared with. It is written in plain language so it is easy to understand.
VibeTags is a tool for Shopify merchants. It helps you write brand and product positioning that AI assistants and AI shopping channels can read. VibeTags does not collect, store, or process any data about your shoppers or buyers. The only personal data we handle is a small amount of merchant and staff data, described below.
Who we are
VibeTags is operated by TrueSource Studio, Sascha Deforth, Germany. If you have any questions about this policy or about how your data is handled, you can reach us at hello@truesource.studio.
What data we collect
When you install VibeTags, you grant the app access to part of your Shopify store through the Shopify Admin API. We collect and process the following.
Store information
Through the Shopify Admin API, with your consent at install, we read:
- Your shop’s domain, name, and URL.
- Your product data — product titles, descriptions, and product types.
This information is used to generate brand and product positioning for your store.
Session and account data
We store an authentication session record in the app’s own database. This record contains your Shopify OAuth access token and, for online sessions, the first name, last name, and email address of the staff member who installed or is using the app.
This is merchant and staff data, not shopping-customer data. It identifies the store and the person operating the app — never your buyers.
Generated content
When VibeTags creates positioning content, it writes that content back into your own Shopify store — as metafields and into the product description. We do not store that generated content in our own database beyond the session record described above.
Shopper data
VibeTags does not collect, store, or process any personal data about your customers, shoppers, or buyers.
How we use your data
- To authenticate the app with your Shopify store and keep it connected while installed.
- To read your shop and product information so the app can generate relevant brand and product positioning.
- To write the positioning content you create back into your own store.
- To generate AI-assisted suggestions when you choose to use that feature (see below).
AI-assisted suggestions
When you click “Auto-Fill with AI”, the app sends the relevant shop and product context — such as your shop name and product titles and descriptions — to Google’s Gemini API to generate suggestions. Google acts as a sub-processor for this feature.
No personal shopping-customer data is sent to the AI service, because the app does not hold any such data.
Third parties and sub-processors
We share data only with the service providers needed to run the app:
- Shopify — the platform your store runs on and the source of the store and product data we access.
- Google (Gemini API) — used to generate AI-assisted suggestions when you choose to use that feature.
- Google Cloud Run — hosts the app and its database.
Data retention
We keep your session data only while the app is installed. The
session record is deleted when you uninstall the app (through
Shopify’s app/uninstalled webhook) and when a
shop redaction is requested (see GDPR below). Generated content
lives in your own Shopify store and is under your control.
GDPR and Shopify compliance webhooks
VibeTags subscribes to Shopify’s mandatory data-protection webhooks:
- customers/data_request and customers/redact — because the app holds no buyer data, there is nothing to return or delete in response to a customer request.
- shop/redact — deletes the shop’s session record from the app’s database.
Your rights
Depending on where you are located, you may have the right to access, correct, export, or delete the personal data we hold about you (the merchant/staff session data). You can exercise these rights at any time by uninstalling the app, which deletes your session record, or by contacting us at hello@truesource.studio.
International data transfers
The app and its database are hosted in the EU (Google Cloud, region europe-west1). Where data is transferred across borders, we rely on the appropriate safeguards required by applicable data-protection law.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page.
Contact us
If you have questions or requests about your data or this policy, contact us at hello@truesource.studio.
Data controller: TrueSource Studio, Sascha Deforth, Germany.