Privacy policy

Information we handle

• Merchant and account information. Store domain, installation identifiers, permissions, authentication credentials, and session information. Where Shopify supplies account user details, these may include a name, email address, user identifier, and locale.
• Products and app billing. Product and variant information, photos, availability, prices, engraving settings, store plan, and app subscription details. Shopify processes app billing and checkout payments; Engrave does not receive full payment card numbers.
• Personalization. Text customers enter, artwork they select, generated preview images, and associated product and design settings. This content may contain personal information chosen by the customer.
• Support and technical information. Information you send when contacting us, together with service events and diagnostic records. Hosting providers may process request metadata, such as IP addresses, to deliver and secure the service.

How we use information

We use information to authenticate stores, save engraving settings, display product previews, submit personalized items to Shopify carts, manage app subscriptions, provide support, and maintain service reliability and security. Operational records help us reconcile interrupted requests and prevent duplicate processing or unauthorized access.

Where applicable law requires a legal basis, processing depends on providing the requested service, our legitimate interests in operating and protecting it, complying with legal obligations, or consent where required.

Customer designs and the merchant’s store

Engrave renders design previews in the customer’s browser. When a customer adds an engraved item to the cart, their text, original artwork where applicable, preview image, and design details are submitted directly to Shopify as cart item properties and file attachments. The merchant can access these details in Shopify to prepare the order.

Merchants determine how they use customer information for their business. Their privacy policies and Shopify’s practices also apply. Contact the store first about orders or personalization held in its Shopify records.

Sharing and service providers

We use Shopify to provide the app integration, product data, cart attachments, and billing. Our infrastructure providers include Fly.io for app hosting, Google Cloud and Firebase for backend services and billing records, and Tigris for database backups. They process information as needed to provide those services. Shopify’s own handling of information is described in its privacy policy.

We may disclose information when required by law or necessary to protect rights and service security. We do not sell personal information or use customer personalization for targeted advertising.

Cookies and browser storage

Authentication and Shopify’s cart may use essential cookies or similar technologies. The personalizer uses browser session storage to remember a purchase attempt identifier so an uncertain request can be checked before trying again. Engrave does not add advertising trackers to these public pages or its personalizer. A merchant’s storefront may use other technologies under its own policy.

Storage, international processing, and security

Our infrastructure includes hosting in the United States. Information may be processed outside your country by us and our providers, where privacy laws may differ. We use authenticated access, restricted backend storage, and encrypted connections to protect information. No internet service can guarantee absolute security.

Retention

Retention depends on the information and its purpose, including providing the service, maintaining security, resolving disputes, and meeting legal obligations. Operational records and backups can have different retention periods. Uninstalling Engrave does not automatically delete personalization already held by Shopify or the merchant. Contact us about information held by Engrave; contact the store about its order records and attachments.

Your privacy choices and rights

Depending on applicable law, you may have rights to access, correct, delete, or obtain a copy of your personal information, restrict or object to processing, or withdraw consent. You may also have the right to complain to your local data protection authority. Contact us to make a request. We may need to verify your identity and, for information controlled by a merchant, coordinate with that merchant.

Changes to this policy

We may update this policy as Engrave or our practices change. The date above identifies the latest revision. We will provide additional notice when required by applicable law.

Contact

For privacy questions or requests, contact Blackberry Technology at support@charmbar.app. Merchants should include their Shopify store domain so we can locate the relevant app records.