1. Introduction
Shadow Size ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and share information about you when you use our website, application, and services (the "Service").
2. Information We Collect
We utilize a "minimal data collection" policy. We only collect what is necessary to provide the Service.
2.1 Information You Provide
- Account Information: When you register, we collect your email address and authentication details (via third-party providers like Google).
- Merchant Information: Your store name, domain, contact information, and other basic business details.
- Product Data: Product information you upload, including names, descriptions, images, size charts, and size recommendations.
- Customer Measurement Data: Body measurement data (height, weight, chest, waist, etc.) or reference brand information provided by customers to receive size recommendations. This data is stored with the recommendation result and does not include the customer's name, email address, or Shopify customer ID.
2.2 Automatically Collected Information
- Usage Data: We may collect information about how you access and use the Service, such as device type, browser version, pages visited, and recommendation history.
- Cookies:
- Essential Cookies: Used to manage user sessions and authentication (must be enabled)
- Analytics Cookies: Used to understand how users use the Service (can be disabled)
- We do not use marketing cookies
- Shopify Data: If you connect a Shopify store, we collect basic store information and product catalog data. We do not access business data via Shopify Customer or Order APIs; we only receive necessary identifiers when responding to Shopify's mandatory compliance webhooks (such as GDPR data subject requests and redaction) solely for matching, fulfilling, and deleting records as legally required.
3. How We Use Your Information
- To Provide the Service: To offer intelligent size recommendation features for your e-commerce store and manage your products and recommendation data.
- To Improve the Service: To understand how users interact with our tool, optimize recommendation algorithms, and enhance product experience and recommendation accuracy.
- To Communicate: To send you important updates regarding your account or the Service (e.g., password resets, policy changes, product management suggestions).
- Data Analysis: To analyze recommendation volume, recommendation results, and shopper feedback to provide business insights and optimization suggestions.
4. Data Sharing and Disclosure
We do not sell your personal data. We may share your information only in the following circumstances:
- Service Providers: With third-party vendors who assist us in operating our Service (e.g., database hosting via Supabase, the Shopify e-commerce platform and payment processing, payment processing via Lemon Squeezy, third-party AI services). These providers are bound by confidentiality agreements.
- Legal Compliance: If required by law or in response to valid requests by public authorities.
- Business Transfers: If we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.
4.1 Cross-Border Data Transfers
- Database hosting and application servers: Supabase and Vercel, located in Singapore
- Payment processing: Handled by Shopify or Lemon Squeezy depending on the purchase channel; data may be transferred across borders.
- AI services: Third-party AI service providers, including Zhipu AI (BigModel) located in China
5. AI Service Usage
We use third-party AI services to parse product size charts and recognize size chart images. When using AI services:
- We only send necessary product information (such as product titles, descriptions, size charts, and size chart images).
- Customer measurement data is processed by our own recommendation algorithm and is not sent to AI service providers.
- We do not send your personal identity information (such as email or password) to AI service providers.
- All AI service providers are required to comply with strict privacy protection standards.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.
7. Your Rights
Depending on your location, you may have the right to:
- Access, correct, or delete your personal information.
- Object to or restrict the processing of your data.
- Withdraw consent at any time.
- Export your data (such as product information and recommendation history).
To exercise these rights, please contact us at the email provided below. We will respond within 30 days of receiving your request.
7.1 Special Notice for EU Users (GDPR)
If you are an EU resident, under the General Data Protection Regulation (GDPR), you have the following additional rights:
- Right to Data Portability: Receive your personal data in a machine-readable format
- Right to be Forgotten: Request deletion of all your personal data
- Right to Object to Automated Decision-Making: Object to decisions based solely on automated processing
8. Data Retention
- During your use of the Service, we retain your account and product data.
- If you cancel your subscription (but keep your account): Data will be retained, and you can continue to access it until you delete your account.
- If you close your account (voluntarily delete): We will delete your personal information within 30 days, unless longer retention is required by law.
- If your account is terminated (due to violation of terms): We may delete your data immediately or retain it as required by law.
- Recommendation history data may be anonymized and used to improve algorithms but will not contain personal identity information.
9. Third-Party Links
Our Service may contain links to third-party websites (such as Shopify stores). We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies.
10. Children's Privacy
This Service is intended for e-commerce merchants and not for individuals under 18 years of age. We do not knowingly collect personal information from children. If you discover that your child has provided us with personal information, please contact us immediately. If we discover that we have inadvertently collected personal information from children, we will take steps to delete such information as soon as possible.
11. Changes to This Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.
12. Contact Us
If you have any questions about this Privacy Policy, please contact us at:
Email: support@shadow.wang