Privacy policy — Color Swatches

This policy describes what the Datima Color Swatches app ("the app"), made by Datima.ai ("we"), stores when a merchant installs it on a Shopify store, and what happens to that data afterwards. The app reads the options and values your products use, gives each value a swatch (one colour, two colours or an image) and draws those swatches on your storefront in place of the value names, inside your theme's own picker. You set the swatches in the app; shoppers click them on your product and collection pages.

What we store

• Shop profile — your store's domain, your store's name, your email, its time zone and currency, and the scopes you granted, as provided by Shopify at install.
• Access token — the credential Shopify issues the app, stored encrypted (AES-256-GCM), bound to your store, and never shown. It lets the app read your products, check your theme's app embed and store an uploaded image in your Files.
• The options the scan found — each option's name, its style (swatch, button, or left to your theme), how many products and values use it, and the handle of one product the Preview button opens. Read from your products through Shopify's API on install and on each scan, so the app can list your options and draw the right ones.
• Each value's swatch — the value's name, its colour or two colours, the URL and id of its image in your store's Files, whether the swatch was detected from the value's name or set by you, and how many products use the value. Drawn on your storefront, so your shoppers see it on your product and collection pages.
• Your settings — shape, size, the hover name, whether the selected value's name shows beside the option label, the sold-out style, collection cards and what a card click does; and when your theme's app embed was last seen on, read from your theme's settings file (read only) to show the embed's status.
• Background job records and webhook receipts — what ran, when, and the payload Shopify sent: the install alert, the uninstall and compliance webhooks, and the products/create and products/update webhooks, which carry a product's title, options, variants and status, so the swatch list stays current.
• A plan record and operational counts — the app is free and the record says so; app-wide operational counts (whether the health check ran, how many storefront requests were answered across every store) to watch the app's health; nothing is counted per store.

Images you upload

An image you choose for a swatch is uploaded to your store's own Files by Shopify and belongs to your store; your storefront serves it from Shopify's CDN. The app keeps only the file's URL and id, and it never deletes a file from your Files: removing or replacing a swatch in the app leaves the file where it is, for you to keep or delete.

Shoppers never reach the app

A shopper's browser reads the swatch list through Shopify's app proxy on your own domain. Shopify adds a logged-in customer's id to that request; the app verifies and discards it, and stores nothing from the request. A click on a swatch selects the variant in your theme's own form, exactly as a click on the theme's picker would; the app receives nothing about the choice, the cart or the order. The app holds nothing about your customers and does not request protected customer data from Shopify: no name, address, email address, phone number or order.

What we don't do

• We don't sell, rent or share data with anyone for their own purposes.
• We run no advertising and no analytics on your store's data, and we don't use it to train models, profile your customers or advise other merchants.
• We don't read more of your store than the app's declared Shopify scopes allow.

Where it lives

The app runs on Amazon Web Services in the United States. Data is encrypted in transit and at rest; access tokens are encrypted with rotating keys and bound to your store. Every store's rows are separated from every other store's at the database level (row-level security), so no request can read another store's data. Sub-processors: Amazon Web Services (hosting, the database and the queue that carries your store's jobs) and Shopify (the source of your products and your theme's settings, and the host of your Files). Nobody else receives your store's data.

Deletion

• Uninstall — on Shopify's app/uninstalled webhook the app destroys its access token and stops processing your store at once. Your swatches and settings are kept so a reinstall restores them.
• Redaction — about 48 hours after an uninstall Shopify sends shop/redact, and every row of your store is deleted: options, swatches, settings, job records, webhook receipts and plan; your store's name, email and access token are blanked. The install record keeps your store's domain, the dates, and the time zone, currency and scopes Shopify reported at install. Images in your Files are yours and stay.
• Customer requests — when Shopify sends customers/redact or customers/data_request for a customer, the app answers that it holds no customer data, because it never requested any.

Your rights

You can see and change everything the app holds for your store from inside the app, and delete it by uninstalling. If you are a customer of a store that uses the app, contact the store: the app holds nothing about you.

Website analytics

This website (datima.ai) uses Google Analytics to understand how visitors find and use the site — page views, referrers, and approximate location, collected with cookies set by Google only after you accept the cookie banner. That is the website, not the app: the app sets no cookies and runs no analytics on your store.

Changes

We will post changes to this page and update the date at the top.

Contact

Privacy questions: support@datima.ai.