What Ovestia knows, and what it doesn't.
Last updated: 26 October 2026. This English version is the reference for the Shopify App Store.
1. Who we are
Ovestia is a Shopify app published by [legal entity], [legal form, capital], registered under number [registration number], with registered office at [address] (“we”). Data controller: [name]. Contact: support@ovestia.com.
2. Who this policy is for
Merchants who install Ovestia on their Shopify store (“you”), and visitors of those stores who meet the Ovestia stylist (“visitors”). Merchants remain the controllers of their own customers' data; Ovestia acts as a processor for the little it processes.
3. What we process
| Data | Source | Why | Retention |
|---|---|---|---|
| Store catalog: products, variants, prices, images, stock | Shopify API, with your authorisation at install | Compose looks and the stylist's notes | While the app is installed, then deleted within 48 h |
| Settings and subscription: store domain, merchant account email, chosen plan, stylist settings | Shopify and your choices in the app | Operate and bill the service (billing is operated by Shopify) | While the app is installed, then deleted within 48 h |
| Anonymous usage events: stylist opened, look adopted, piece swapped, mode chosen, screen size, tied to a random session identifier | The stylist, in the visitor's browser | Show the merchant what the stylist produces; improve look composition | 90 days, automatic deletion |
| Order attribution: order number, lines coming from a look, amounts, currency | Shopify “order created” webhook | Measure the revenue attributed to the stylist | 90 days, automatic deletion |
| Demo request: email address, store address, optional message | The form on this site, filled in by you | Reply to you and prepare the demo you asked for | 400 days after the last exchange, automatic deletion. The email address is also sent to us as a Telegram alert (see § 5) |
| Sizes remembered by the visitor | Entered by the visitor, stored in their browser only | Offer the right size on the next looks | Up to 365 days, in the visitor's browser; never sent to our servers |
What we do not process. No personal data of your customers: no name, email, address, phone, customer identifier or payment method. Orders reach us without those fields. We set no tracking cookie on your store and use no advertising tool.
Backups
A compressed copy of the database is written every night to our host's persistent disk (Frankfurt, encrypted at rest), and a second copy goes to Backblaze (Amsterdam, encrypted at rest), both on a 14-day rotation. They cover accidental deletion or corruption, and the loss of the host. What the durations above would not say on their own: deleted data may remain in those backups for up to 14 days, where it is only read to recover from an incident, and then disappears by rotation.
4. The stylist's notes and artificial intelligence
Look titles and styling notes are generated by a language model from product pages only (name, category, description, price). These texts are checked by rules that reject any claim absent from the page. No visitor or customer data is sent to the model provider. Provider: Anthropic, PBC (United States), under its commitment not to train its models on data sent through the API.
5. Where data is hosted
| Processor | Role | Location |
|---|---|---|
| Render Services, Inc. | Application hosting | Frankfurt, Germany (European Union) |
| MongoDB, Inc. (Atlas) | Database | Frankfurt, Germany (European Union) |
| Upstash, Inc. | Technical cache | Frankfurt, Germany (European Union) |
| Anthropic, PBC | Generation of the stylist's notes (product pages only) | United States, standard contractual clauses |
| Shopify International Ltd. | Platform, billing, webhook delivery | Per your Shopify agreement |
| Backblaze, Inc. | Off-site copy of the nightly database backups (§ 3), encrypted at rest, 14-day rotation | Amsterdam, Netherlands (European Union) |
| Resend, Inc. | Service emails to the merchant (for example: the stylist has disappeared from your theme). Recipient and message content only | United States, standard contractual clauses |
| Telegram FZ-LLC | Operational alerts to the operator: store address, event (install, uninstall, subscription, error, GDPR request received) and, for a demo request, the email address entered on this site. No visitor or customer data | United Arab Emirates, standard contractual clauses |
6. Security
Encryption in transit (TLS) and at rest, app access authenticated with Shopify session tokens, dedicated and rotated access keys, a single authorised operator. Every Shopify request (webhooks) is signature-verified before processing.
7. Your rights and your customers' rights
Ovestia answers the GDPR requests relayed by Shopify: access to a customer's data (we hold none and confirm it), erasure of a customer's data (same), and erasure of the store 48 hours after uninstall, which purges the catalog, settings and events. Each request is logged for 13 months as proof of processing. You can also write to support@ovestia.com to exercise your rights of access, rectification, erasure, restriction and portability, or lodge a complaint with your supervisory authority.
8. Changes
Any substantial change to this policy is announced in the app and dated at the top of this page.