Skip to content

Privacy Policy

Last updated October 7, 2026

This Privacy Policy explains how Craftshift (“we”, “us”) handles information in the Export Product Images Shopify app (the “App”) and on storemediaexporter.com (the “Website”). If you have any questions, email support@craftshift.com. The App also has its own privacy policy at assetexport.app/privacy-policy.

Summary

  • We read your products, files and metaobjects only to build the export you ask for.
  • The App cannot change or delete anything in your store.
  • Export ZIP files are stored privately, the download link works for 7 days and the ZIP is deleted after 30 days.
  • We never sell your data and never share it with third parties for advertising.
  • When you uninstall the App, we delete the data related to your store.

Information we collect

From your Shopify store (App). When you install the App, Shopify shares your store’s name, domain, contact email, plan and details of the store owner and staff, as listed on the App Store. To build an export, the App reads your products and variants (titles, handles, SKUs, barcodes, stock, IDs), your product media, the files in Content > Files and your metaobjects. It does not write to your store.

Export files and logs (App). When you run an export, the App downloads the selected files from Shopify’s servers and packs them into one ZIP file. We store the ZIP, and job logs with file names, counts and statuses, so you can download the result and review the job.

When you contact us. If you email or chat with us, we receive your name, email address and the content of your message.

On the Website. We use Google Analytics 4, provided by Google, to understand how the Website is used, for example which pages are read and which links lead to the App Store. It uses the cookies _ga and _ga_Z53YGBJTS2, each kept for up to 2 years. If you visit from the EU/EEA, the United Kingdom or Switzerland, these cookies are set only after you click “Accept” in the cookie banner, and we rely on that consent (GDPR Article 6(1)(a)); until then, or if you decline, Google receives only cookieless signals without identifiers. Everywhere else, analytics is on by default and you can turn it off at any time. Google Analytics 4 does not log or store IP addresses, and advertising storage is always switched off on the Website. You can change your choice at any time with “Cookie settings” at the bottom of every page, or use Google’s opt-out browser add-on. Google may process this data in the United States; Google LLC is certified under the EU-U.S. Data Privacy Framework.

To decide whether to show the cookie banner, your browser asks our hosting provider (Cloudflare) which country you are visiting from; we don’t store it. Your language choice and your cookie choice are stored in your browser’s local storage. Our hosting provider processes standard server logs (IP address, browser type, time of request) for security and reliability.

How we use information

We use information to:

  • Provide the App: list your files, build the ZIP, show and email export status.
  • Provide support when you ask for it, for example by checking a job’s log to explain a result.
  • Bill you through Shopify’s billing system.
  • Maintain security, prevent abuse and improve the App.
  • Send service emails about your exports and your account.

Where export files are stored

Export ZIP files are stored in a private Amazon Web Services (AWS) S3 bucket. Nothing in the bucket is public. You download a ZIP through a signed link that stops working after 7 days, and the ZIP is deleted automatically after 30 days. The App writes the ZIP while it is being built and does not keep your files on its own servers.

Sharing

We do not sell, rent or trade your information. We share data only with service providers who help us run the App (cloud hosting and storage, email delivery, error monitoring and customer chat), under contracts that require them to protect it, and when required by law. On the Website, Google is our analytics provider, as described above.

Security

Data is transmitted over TLS and encrypted at rest. Access is restricted to authorised staff.

Retention and deletion

We keep your store data while the App is installed. Export ZIP files are deleted after 30 days. When you uninstall, Shopify notifies us and we delete the data related to your store. You can ask us to delete your data at any time by emailing support@craftshift.com.

Your rights (GDPR and CCPA)

Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, and the right to data portability. California residents have the right to know what personal information we collect and to request its deletion; we do not sell personal information. To exercise any right, email us. We respond within one month.

Children

The App and Website are intended for businesses. We do not knowingly collect information from children under 16.

Changes

We may update this policy. The “Last updated” date above shows when it last changed; significant changes will be announced in the App.

Contact

Craftshift, Letterhout, 1507 EG Zaandam, Netherlands. Email: support@craftshift.com