Privacy policy – Merch Designer 3D

Last updated: 13 October 2026

Merch Designer 3D is a Shopify app that lets a store's customers design a cap in 3D and send a quote request to the store. The app is provided by ArtByBearded AB (corporate ID 559558-0985), Regementsgatan 44, Östersund, Sweden (“we”). This policy explains what data the app processes and why.

Roles

For data about a store's customers, the merchant (the Shopify store) is the data controller and we process the data on the merchant's behalf, only to provide the app. For data about the merchant's own account (store domain and app settings), we are the controller.

Data we process

• Store data: the store's myshopify domain, the access token Shopify issues to the app, and the app's settings (selected cap models, accent colour, optional webhook URL).
• Quote requests from the store's customers: name, email address, phone number and company (if entered), quantity, message, and the cap design (colours, embroidery text, uploaded logo images, a preview image and the design file).
• Technical data: standard server logs (IP address, time, requested URL) kept by our hosting provider for security and troubleshooting.

We do not read the store's orders, products or customer records in Shopify, and we do not use cookies or tracking in the storefront. Saved designs in the studio are stored in the visitor's own browser (local storage) until they choose to send them.

Why we process it

• To show the 3D studio in the store and deliver each quote request to the merchant (in the app, through the store's contact form, and to the merchant's webhook if the merchant has set one up).
• To bill the subscription through Shopify and to provide support.

We never sell data and never use the store's customer data for our own marketing.

Where data is stored

The app runs on Vercel (servers in Stockholm, Sweden) and stores data in a Supabase Postgres database in the EU (Ireland). These sub-processors act on our instructions under data processing agreements. If the merchant adds a webhook, requests are also sent to the service the merchant chooses.

Retention and deletion

• Quote requests and designs are kept while the app is installed so the merchant can access them.
• When a store's customer asks the merchant to delete their data, Shopify sends us a deletion request and we delete that customer's quote requests.
• When the app is uninstalled, Shopify sends a shop deletion request 48 hours later and we delete all of the store's data (settings, designs and quote requests).
• Merchants can request a copy or deletion of their data at any time by emailing us.

Your rights

Under the GDPR you have the right to access, correct and delete your personal data and to object to or restrict its processing. If you are a customer of a store using Merch Designer 3D, please contact that store first – they control your data. You can also contact us, and you may complain to the Swedish Authority for Privacy Protection (IMY).

Contact

ArtByBearded AB · info@artbybearded.com · Regementsgatan 44, Östersund, Sweden