Privacy Policy

This policy explains what personal data we process when a merchant installs and uses the Veranza — AI Ad Studio app for Shopify (the "app"), why we process it, who helps us do so, how long we keep it and what rights you have. The Veranza web application at veranza.xyz has its own privacy policy.

1. Who we are

The controller of your personal data is Václav Mottl, a sole trader registered in the Czech Republic and operating under the name Veranza, company ID (IČO) 09097147, registered address Felbabka 100, 268 01 Felbabka, Czech Republic ("we", "us").

Privacy questions and requests: dpo@veranza.xyz. General support: support@veranza.xyz. We have not appointed a data protection officer because the law does not require us to; the dpo@ address reaches the person responsible for data protection.

2. What data we process

Store and account information

When the app is first opened, we receive from Shopify your store's name, myshopify domain, store e-mail address, primary language and currency, and an access token for the Shopify Admin API (stored encrypted). The app uses read-only access to products and store languages; it never changes your products or store settings. We use the store e-mail address to create a Veranza account for your store automatically, named after your store. If that e-mail address already belongs to a Veranza account, the store is added to that account as a separate workspace. We verify the Shopify session token of requests from the app but do not store information about individual staff accounts.

Product catalog

Product titles, descriptions, product types, prices, the main product image, product page links and stock availability, imported from your store so you can create ads for them.

Brand profile

To match your brand, we read the public homepage of your Online Store (page title, meta description, headings and visible text) together with a few of your products, and use AI to derive a short brand profile: industry, target audience, visual identity and style directions. If your storefront is password-protected, this step is skipped.

Generated creatives and settings

The ad images and ad copy we generate for you, the formats and languages you choose, and your app settings (for example the app language).

Plan and usage

Your plan, the Shopify subscription ID and status, and how many generations you have used. Payments are handled entirely by Shopify; we never receive card or bank details.

Meta integration (only if you connect Meta)

• your Meta user ID, the Business portfolio, ad account, Facebook Page and Meta Pixel you select (IDs and names);
• Meta access tokens, stored encrypted (AES-256-GCM), the permissions you granted and when the token expires;
• the campaigns, ad sets and ads you create through the app, with their settings (goal, budget, schedule, age, gender and location targeting), ad copy and links;
• aggregated performance metrics for those ads (impressions, clicks, spend, click-through rate, purchases and purchase value, also split by placement and ad text), your target ROAS / CPA if you set them, and a log of campaign actions such as pausing or resuming.

Meta only returns aggregated statistics. We never receive data about the individual people who see or click your ads.

Support communication

The content of e-mails you send us and our replies.

Technical data

When you use the app, our servers and network provider process your IP address, browser and device information and request details in server logs. When an error occurs, a technical error report is sent to our error-monitoring provider. For a sample of sessions, and for sessions in which an error occurs, the provider also records a replay of the app screen in which all text and form inputs are masked and all images and media are blocked. Inside the Shopify admin the app sets no cookies of its own. When you connect Meta, the connection window sets one strictly necessary cookie that holds the connection details (with the Meta access tokens encrypted) for up to 5 minutes while you choose your ad account and Page. Apart from the error monitoring described above, the app uses no analytics or advertising tools. It keeps a few technical values in your browser's storage, such as the progress of a running generation.

What we do not process

We do not access or store personal data of your customers. The app has no permission to read customers, orders or addresses. We add no scripts, pixels or cookies to your storefront. If you use retargeting, the audience is a rule inside your own Meta ad account based on your Meta Pixel; the visitor data stays with Meta and never passes through Veranza.

3. Why we process it and on what legal basis

• Providing the app you installed (creating your account, importing products, detecting your brand, generating creatives and ad copy, publishing to Meta, running and reporting on campaigns, managing your plan and its limits, answering support requests) — performance of a contract, Art. 6(1)(b) GDPR.
• Service e-mails, for example a reminder before a Meta connection expires — performance of a contract, Art. 6(1)(b) GDPR.
• Security, preventing abuse, error monitoring and troubleshooting — our legitimate interest in a secure and working service, Art. 6(1)(f) GDPR.
• Legal obligations, such as accounting and tax records or answering data protection requests — Art. 6(1)(c) GDPR.

Store data received from Shopify is necessary to provide the app; without it the app cannot work. Connecting Meta is optional; without it you can still generate and download creatives.

We do not sell personal data, do not use it to advertise to you on behalf of others, and do not use your products, brand profile or creatives to train AI models. The app does not make decisions about people that have legal or similarly significant effects.

4. AI processing

To generate creatives, we send your product image, product details and brand profile to AI image and text models; to build the brand profile, we send text from your public storefront. We use these providers' paid APIs, whose terms do not allow them to use this data to train their models. The providers may keep it for a limited time for abuse monitoring, as described in their terms.

5. Service providers and other recipients

We use the following providers to run the app. They process data on our behalf and under our instructions:

• Google — application hosting on Google Cloud Run (region europe-west3, Frankfurt, Germany); Google Cloud Logging for server logs; and the Gemini API for brand analysis, ad copy and, as a fallback, image generation.
• OpenAI — image generation from your product photos.
• Supabase — database and user authentication.
• Cloudflare — the network edge in front of veranza.xyz (DNS, delivery and protection of traffic), R2 storage for generated images, and routing of e-mail sent to our addresses.
• Sentry— error monitoring and masked session replay, in Sentry's EU data region (Germany).
• Resend — delivery of service e-mails.

These parties receive data as independent controllers under their own privacy terms:

• Shopify — the platform the app runs in; it handles installation, authentication and all billing for the app.
• Meta — only if you connect your Meta account. We send your creatives, ad copy and campaign settings to your own Meta ad account through the Meta Marketing API and read back the statistics described above.
• Public authorities, where we are required by law to disclose data.

E-mails sent to our addresses are forwarded by Cloudflare Email Routing to a mailbox provided by Google (Gmail), under Google's own terms.

Generated images are delivered from our storage through long, hard-to-guess links so that the app and Meta can load them. The links are not published anywhere, but anyone who has a link can open the image.

6. International transfers

Some of our providers are based in the United States or process data outside the European Economic Area. Where that happens, we rely on an adequacy decision of the European Commission (including the EU–U.S. Data Privacy Framework, for providers certified under it) or on the Standard Contractual Clauses included in the provider's data processing terms. You can ask for more information about these safeguards at dpo@veranza.xyz.

7. How long we keep data

• While the app is installed, we keep your data for as long as you use the app.
• When you uninstall the app, we lose access to your store and Shopify ends any paid plan. If the app created a workspace for your store (it does so when it is opened in the Shopify admin for a store that is not connected to a veranza.xyz workspace yet), we also pause the Veranza campaigns still active in that workspace's connected Meta ad account (this requires the Meta connection to still be valid).
• About 48 hours after uninstall, Shopify sends us a shop data erasure request (shop/redact). If the app created a workspace for your store, we then automatically empty that workspace completely: the imported product catalog, all generated creatives including their image files and ad copy, the brand profile and brand assets, the Meta connection (the stored Meta tokens) with its campaign records, performance metrics and campaign action log, and anything else added to it, including on veranza.xyz (for example feeds, products or brands). The workspace itself is deleted unless it is the only workspace of its account. We also delete the store connection (store details, the Shopify access token, plan and usage data) and the Veranza account that was created automatically for your store — unless that account has also been used to sign in at veranza.xyz or is still in use for another store, in which case the account stays yours, but the content of the store's workspace does not.
• If you connected the store from an existing veranza.xyz workspace, the automatic erasure removes the store connection (store details, the Shopify access token, plan and usage data) and the brand profile detected from your storefront. The products imported into that workspace, and the creatives generated from them, stay there until you delete them, or until we delete them within 30 days of a request sent to dpo@veranza.xyz. Uninstalling such a store does not pause that workspace's campaigns. The rest of that workspace stays yours.
• On request: anything we keep, such as products imported into an existing veranza.xyz workspace, or anything you want removed sooner, we delete within 30 days of a request sent to dpo@veranza.xyz from the store e-mail address or the e-mail address of your Veranza account. You can remove the Meta connection yourself at any time in the app under Settings → Disconnect, which deletes the stored Meta tokens immediately.
• Server logsare kept for about 30 days (the default retention of our hosting provider's logging service) and then deleted automatically. Error reportsare deleted automatically at the end of Sentry's retention period for our plan.
• Backups:deleted data can remain in our database provider's backups for a limited period until those backups are rotated.
• Records we must keep by law, such as accounting and tax records about app charges, are kept for the period required by Czech law.
• Campaigns and ads you created in your Meta ad account belong to you and stay in Meta until you delete them there.

Because we hold no personal data of your customers, Shopify's customer data requests (customers/data_request and customers/redact) have nothing to export or delete. We acknowledge them and log that no data is held.

8. Security

Data is encrypted in transit (HTTPS). Shopify and Meta access tokens are stored encrypted. Requests from the app inside the Shopify admin are checked against a Shopify session token; the Meta connection window is authorised by a short-lived encrypted token issued from that session, and plan changes are confirmed directly with Shopify. Every Shopify webhook is verified by its signature. Access to production systems is limited to the people who operate the service.

9. Your rights

Under the GDPR you have the right to access your personal data, to have it corrected or deleted, to restrict its processing, to receive it in a portable format and to object to processing based on our legitimate interests. To exercise any of these rights, write to dpo@veranza.xyz, ideally from your store e-mail address so that we can verify the request. We respond within one month; in complex cases this period may be extended as the GDPR allows, and we will tell you if that happens.

You also have the right to lodge a complaint with a supervisory authority. In the Czech Republic this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz); you can also contact the authority in the EU country where you live or work.

10. Children

The app is a business tool for merchants and is not directed at children.

11. Changes to this policy

If we change how the app processes data, we will update this page and its effective date. We will tell you about material changes in the app or by e-mail before they take effect.