Theia

Privacy Policy

Last updated: July 12, 2026

This Privacy Policy explains how TheiaEcom ("we", "us") handles information in connection with the Shopify app Theia: Product Customizer (the "App"). TheiaEcom is operated by Rauf Nematli, Türkiye. By installing or using the App, you agree to this policy.

1. Information we collect

When a merchant installs the App, we access, via Shopify's authorized APIs, the store domain and basic store information needed to operate the App. We store the App's configuration you create (products enabled, print areas, pricing rules, plan).

When a customer uses the customizer on a merchant's storefront, we process and store the design files and images they upload or create, so the merchant can fulfil the order. We do not intentionally collect customer names, emails, addresses, or payment data — those remain within Shopify.

2. How we use information

To provide and operate the customizer (save configuration, store designs, generate print-ready files).
To add optional print fees to the cart when configured by the merchant.
To provide support and respond to your requests.
To monitor errors and keep the service reliable.

We do not sell personal information, and we do not use uploaded designs for any purpose other than providing the service to the merchant.

3. Data storage & retention

Configuration data is stored in a PostgreSQL database. Uploaded design images are stored on Cloudflare R2 and served via a global CDN. Customer design files are automatically deleted 30 days after they are created. Merchant configuration is retained while the App is installed and removed on uninstall or upon request.

4. Sub-processors

We rely on the following service providers to run the App:

Shopify — platform, authentication, billing.
Cloudflare (R2 & CDN) — image storage and delivery.
Resend — transactional email (support messages).
Sentry — error monitoring.
Hetzner — application hosting.

5. GDPR & data requests

We honor Shopify's mandatory privacy webhooks. When a store owner or customer requests data access or deletion through Shopify, the App responds accordingly and deletes the relevant stored designs. You may also contact us directly to request access to, or deletion of, data we hold.

6. Data security

Data is transmitted over encrypted connections (HTTPS). Storefront-to-app requests are validated through Shopify's signed App Proxy. Access to stored data is restricted to the App's operation.

7. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

8. Contact

For any privacy question or request, contact us at support@theiaapps.com.