Privacy Policy

1. Introduction

Humane ApS ("we", "our", or "us") operates the EcommerceLayer application (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify application and related websites.

By installing or using EcommerceLayer, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Shopify store data

When you install EcommerceLayer, we access the following data from your Shopify store:

• Product information (titles, descriptions, images, variants, pricing)
• Collection information (titles, descriptions)
• Page and blog content
• Store name and domain

2.2 Data we do not collect

2.3 Account information

When you create an EcommerceLayer account, we collect your email address and a hashed password (managed via Supabase Auth).

3. How We Use Your Information

We use the collected information for the following purposes:

• To generate AI-powered content for your products and collections
• To sync your product catalog for content management
• To push generated content back to your Shopify store after you approve it
• To provide customer support
• To improve our Service

4. Data Storage and Security

4.1 Where we store data

• Supabase — PostgreSQL database with Row Level Security (RLS)
• Google Cloud Run — backend hosting (europe-west1 region)

4.2 Security measures

• All data is encrypted in transit using TLS 1.3
• Access tokens are stored encrypted at rest
• Row Level Security ensures data isolation between stores
• HMAC signature verification on all Shopify webhooks
• Regular security audits and dependency updates

5. Data Retention

We retain your store data for as long as your integration remains active. When you uninstall the app:

• Your integration is immediately marked as disconnected
• All store data is permanently deleted within 48 hours of receiving Shopify's shop/redact webhook

6. Data Sharing

We do not sell, trade, or rent your data to third parties. We may share data with:

• Google Cloud AI — for content generation (product data is processed but not stored long-term by Google)
• Service providers — who assist in operating our Service (e.g. Supabase for database hosting)

All third-party providers are bound by confidentiality agreements and are prohibited from using your data for any purpose other than providing services to us.

7. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the right to:

• Access — request a copy of your personal data
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data
• Restriction — request limitation of data processing
• Portability — receive your data in a portable format
• Objection — object to certain processing activities

To exercise these rights, contact us at privacy@humane.dk.

8. GDPR Compliance

EcommerceLayer is fully compliant with the General Data Protection Regulation (GDPR). We implement all required Shopify compliance webhooks:

• Customer data request — handled within 30 days
• Customer data deletion — processed promptly
• Shop data deletion — completed within 48 hours

9. Cookies and Tracking

Our application uses minimal cookies for authentication and session management only. We do not use tracking cookies or third-party analytics that collect personal information.

10. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy, please contact us:

• Email: privacy@humane.dk
• Company: Humane ApS
• Website: ecommercelayer.com