AttriFix Privacy Policy

Last updated: August 17, 2026

AttriFix ("the App") helps Shopify merchants fill in missing Google Shopping product attributes. This page explains what data the App accesses, how it's used, how long it's kept, and how to exercise your data rights.

1. Data we access from your Shopify store

When you install AttriFix, we access the following data through the Shopify Admin API, limited to what's needed to generate and confirm attribute suggestions:

• Product title, vendor, and description
• Product and variant images (image URLs)
• Existing Google Shopping metafields (color, material, gender, age group, and Google product category), where already set
• Variant titles and options (used to check image/variant matches)

We do not access customer data, orders, or payment information. This data is used solely to generate AI-suggested values for missing Google Shopping attributes and to detect image/variant mismatches, so you can review and approve them with one click.

2. Sharing data with OpenAI

To generate attribute suggestions, AttriFix sends relevant product data — product title, vendor, description, and product/variant image URLs — to OpenAI's API (api.openai.com), which we use as a third-party AI service provider.

Per OpenAI's API data usage policy, data submitted through the OpenAI API is not used to train or improve OpenAI's models unless a customer explicitly opts in — and we do not opt in. OpenAI retains API inputs and outputs for up to 30 days for abuse-monitoring purposes, after which they are deleted, unless a longer period is required by law.

3. Data retention

We retain the product data and AI-generated suggestions described above for as long as your store has AttriFix installed, so the App can keep your attribute data up to date.

If you uninstall AttriFix, your session data is deleted immediately. We delete the remaining store-related data associated with your shop (attribute suggestions and variant checks) within 30 days of uninstallation.

4. GDPR compliance webhooks

AttriFix implements Shopify's three mandatory GDPR webhooks:

• customers/data_request — acknowledges requests for a customer's data (the App does not store customer data)
• customers/redact — acknowledges requests to delete a customer's data (the App does not store customer data)
• shop/redact — deletes store-related data we hold when a shop's data must be redacted

5. Your rights

You can request access to, or deletion of, the data we hold about your store at any time by contacting us. If you're located in the EU/EEA or UK, you have rights under GDPR to access, correct, or delete your data, and to object to or restrict certain processing.

6. Contact

For privacy or GDPR-related requests, contact us at alenka@luminovisuals.com.