PixProof privacy policy
Last updated: 13 October 2026
PixProof ("the app") is a Shopify app made by Liquid Monks, 1 East Erie St, Suite 525-4527, Chicago, IL 60611, United States. It checks a store's product images against Google Merchant Center image requirements, fixes the images the merchant chooses, and can undo every fix. This policy explains what the app stores, why, and when it is deleted.
Who this covers
The merchant who installs PixProof on their Shopify store. PixProof does not collect information about the store's customers, and it has no part of the store's checkout or storefront.
What PixProof stores
| What | Why | Where it comes from |
|---|---|---|
The store's Shopify address (*.myshopify.com), install and uninstall dates, plan |
To run the app for that store and bill through Shopify | Shopify, at install |
| Shopify access tokens | To read and update the store's product images when the merchant asks | Shopify, at install. Stored encrypted (AES-256-GCM); never shown, logged or shared |
| Product details needed to check images: product ID, title, handle, vendor, product type, tags, status | To name products in reports and generate alt text | The store's catalogue, read through Shopify's API |
| Product image details: image ID, address, size, format, alt text | To check each image against Google's requirements | The store's catalogue |
| Image files: the fixed images, and a copy of each original image saved before it is replaced | So the merchant can preview fixes, and undo any fix | Produced by the app from the store's own images |
| A record of every fix and undo, and an activity log of what the app did and when | So every change can be checked and reversed | The app |
| The store's PixProof settings (image size, background colour, format, and so on) | To fix images the way the merchant chose | The merchant |
PixProof does not store customer names, emails, addresses, phone numbers, orders, payment
details, or anything about the store's staff. Shopify's privacy webhooks for customer data
(customers/data_request, customers/redact) are received, logged and answered: PixProof holds no
customer data to return or delete.
How it is used
Only to provide the app to the store that installed it: checking images, making the fixes the merchant approves, undoing them, and showing the results. PixProof does not sell or rent data, does not use it for advertising, does not share one store's data with another store, and does not use it to train AI models.
Who else handles it
- Shopify, which hosts the store, provides the API PixProof uses, and handles billing.
- Contabo, which hosts PixProof's server, database, image files and backups, in the United States. Backups stay on that server for now; if an off-site backup provider is added, it will be named here before it receives any data.
- Cloudflare provides DNS for the app's address only; no store data passes through it.
No other third party receives store data.
How long it is kept
- While the app is installed: kept so fixes can be shown and undone.
- When the app is uninstalled: the access tokens are deleted at once, so PixProof can no longer reach the store.
- About 48 hours after uninstall, Shopify sends PixProof a deletion request for the store. PixProof then deletes everything it holds for that store: records, settings, the activity log, fixed images and saved originals.
- Backstop: whatever happens to that request, all of a store's data is deleted no later than 30 days after uninstall.
- Reinstalling within that time keeps the store's history (including undo) unless the deletion has already run.
A merchant can ask for deletion sooner by writing to the address below; it is done promptly.
Security
- Access tokens are encrypted at rest, and the encryption keys can be rotated.
- Every database query is limited to one store; one store's data is never visible to another.
- Processed images are reachable only through short-lived signed links.
- Changes to a store need the merchant's explicit confirmation, and the app keeps the original of every image it changes.
The merchant's rights
Merchants can ask what PixProof holds about their store, ask for a copy, ask for corrections, or ask for deletion, at the address below. Where data-protection law (such as the GDPR or CCPA) applies, Liquid Monks handles store data as a processor for the merchant.
Changes to this policy
Changes are posted here with a new date. Material changes are shown in the app before they take effect.
Contact
Email info@liquidmonks.com for any privacy question, including a request for a copy of your store's data or for its deletion. We answer within five business days.