Privacy Policy

1. Overview

joycraft ("we", "our", "us") is an indie studio that builds Shopify apps and Chrome browser extensions. This Privacy Policy covers all joycraft products, including Shopify Checkout UI Extensions (TrustPulse, AgeShield Pro, Upsell Pro, Herd, CartNote Pro, TermCheck Pro, VatPO Pro, CostPilot Pro, PayGuard, Pixova) and Chrome extensions (PostBoost AI, CourseSpeed, StreamEnhancer, Promotify).

By using any joycraft product, you agree to the data practices described in this policy.

2. Data Controller

joycraft
Email: support@joycraft.dev
Website: joycraft.dev

3. Shopify Apps — Data Practices

3.1 What We Access

Our Shopify apps access only the data necessary to function, using Shopify's official API with the minimum required scopes:

• Store information — shop domain, currency, timezone (required for app configuration)
• Order data — order attributes and metafields (only for apps that write to orders, such as age verification timestamps or VAT/PO fields)
• Theme data — read-only access to verify theme compatibility (where applicable)

3.2 What We Do NOT Access

• Customer personally identifiable information (PII)
• Payment details or credit card information
• Store financial data or revenue figures
• Any data beyond the minimum required for the app to function

3.3 Data Storage

App configuration settings and subscription status are stored on our private server. Order-related data (timestamps, VAT numbers, PO references) is stored directly in your Shopify store's order records — we do not maintain a separate copy.

3.4 Uninstall Data Handling

When you uninstall any joycraft Shopify app, all app-specific data is removed from our server. Data written to your Shopify order records remains in your store as it belongs to you.

4. Chrome Extensions — Data Practices

4.1 Data Actively Provided

When you use our Chrome extensions (PostBoost AI, CourseSpeed, StreamEnhancer, Promotify), the following data may be sent to our server only when you trigger a specific action:

• Text input — product descriptions, captions, or any text you enter for AI processing
• Images — product images you explicitly choose to analyze (transmitted as base64)
• Course metadata — course titles and video information for speed control features

4.2 Automatically Included Metadata

Each API request includes: platform identifier, language preference, extension version, a random device ID (UUID) for quota tracking, and a hashed machine fingerprint for abuse prevention. None of these can identify you personally.

4.3 Local Browser Storage

Extension settings, preferences, and usage quotas are stored locally in chrome.storage.local. This data never leaves your browser.

4.4 AI Processing

Text and images sent for AI generation are processed by our backend and transmitted to third-party AI providers (OpenAI, DeepSeek, Google) solely for the purpose of generating your requested output. Data is not used for model training by these providers per their API terms.

5. Data We NEVER Collect

• Browsing history
• Passwords or credentials
• Personal identity documents
• Financial or payment information (payments are processed by Shopify or Chrome Web Store)
• Location data beyond what is necessary for regional features

6. Third-Party Services

Service	Purpose	Data Shared
OpenAI API	AI text generation	User-provided text prompts
DeepSeek API	AI text generation	User-provided text prompts
Google AI API	AI image analysis	User-selected images
Shopify API	App functionality	Store/order data per app scope
QQ Business Mail	Email notifications	Subscriber email addresses

7. Data Retention

• Shopify apps: App configuration deleted on uninstall. Order data retained in your store.
• Chrome extensions: AI generation history is not stored. Device ID and quota counters retained for service operation.
• Email subscriptions: Stored until you unsubscribe or request deletion.

8. Your Rights

You have the right to:

• Request a copy of any personal data we hold about you
• Request deletion of your personal data
• Unsubscribe from communications at any time
• Uninstall any app or extension at any time with no residual effects

To exercise these rights, email support@joycraft.dev.

9. Children's Privacy

Our products are not directed at children under 13. We do not knowingly collect data from children.

10. Changes to This Policy

We will notify users of material changes via email (if subscribed) or through our website.