Skip to content

Privacy Policy

Last updated October 5, 2026

This Privacy Policy explains how Craftshift (“we”, “us”) handles information in the Smart Bulk Image Upload Shopify app (the “App”) and on bulkimageupload.com (the “Website”). If you have any questions, email [email protected].

Summary

  • We use your store and image data only to match and upload your product images.
  • We access Google Drive and Dropbox read-only, and only to list and download the images you choose.
  • We never sell your data and never share it with third parties for advertising.
  • When you uninstall the App, your shop data and cloud-storage tokens are deleted.

Information we collect

From your Shopify store (App). When you install the App, Shopify shares your store’s name, domain, contact email and plan. To match and upload images, the App reads your products and variants (titles, SKUs, barcodes, metafields and IDs) and writes product images and files.

From Google Drive or Dropbox (App). When you connect an account, we receive an access token that lets the App list the folders you select and download the image files in them. We store file names, sizes and dimensions in your upload logs so you can review each job.

When you contact us. If you email or chat with us, we receive your name, email address and the content of your message.

On the Website. The Website does not use advertising or tracking cookies. It stores your language choice in your browser’s local storage. We may use privacy-friendly, cookie-less analytics (Cloudflare Web Analytics) to count page views. Our hosting provider processes standard server logs (IP address, browser type, time of request) for security and reliability.

How we use information

We use information to:

  • Provide the App: match images to products, upload them, and show and email upload logs.
  • Provide support when you ask for it, for example by checking a job’s logs to explain a result.
  • Bill you through Shopify’s billing system.
  • Maintain security, prevent abuse and improve the App.
  • Send service emails about your uploads and your account.

How we access, use and store Google Drive data

  • We connect to your Google Drive account to fetch your product images.
  • We use this data to display image information and a preview before uploading images to your store.
  • After your approval, we fetch the images from your account and send them to the Shopify API to attach them to your products.
  • We store information about your images (file names, sizes) in logs to show you upload details.
  • We may check those logs to help you with a problem, at your request.
  • We delete all data related to you automatically when you uninstall the App.

Smart Bulk Image Upload’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to develop, improve or train generalized AI or machine-learning models.

AI matching

If you choose an AI matching type, the App sends file names and product identifiers (never the images themselves) to our AI matching provider to suggest matches. This data is processed only to produce the matches for your run.

Sharing

We do not sell, rent or trade your information. We share data only with service providers who help us run the App (hosting, email delivery, error monitoring, AI matching), under contracts that require them to protect it, and when required by law.

Security

All data is transmitted over TLS 1.2 or higher and encrypted at rest. Access is restricted to authorised staff. Cloud-storage tokens are kept only while the connection exists; disconnecting the account or uninstalling the App revokes and deletes them.

Retention and deletion

We keep your data while the App is installed. When you uninstall, Shopify notifies us and we delete your shop data, tokens and logs. You can ask us to delete your data at any time by emailing [email protected].

Your rights (GDPR and CCPA)

Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, and the right to data portability. California residents have the right to know what personal information we collect and to request its deletion; we do not sell personal information. To exercise any right, email us. We respond within one month.

Children

The App and Website are intended for businesses. We do not knowingly collect information from children under 16.

Changes

We may update this policy. The “Last updated” date above shows when it last changed; significant changes will be announced in the App.

Contact

Craftshift, Letterhout, 1507 EG Zaandam, Netherlands. Email: [email protected]