Privacy Policy

From merchants (store data). When you install the App we receive, via Shopify, your store domain, store ID, and the contact/email associated with the install. We store the App’s settings you configure (e.g. which products show the button, regenerate cooldown, rate limit, monthly spend cap), your subscription/billing status, and usage records (the number and timestamps of visualisations) used for metering and billing.

From shoppers (end customers). To generate a preview, the App processes a photo of a room that the shopper voluntarily uploads, together with the image of the product/variant they selected. We also process limited technical data (such as IP address and request metadata) to enforce rate limits and prevent abuse. We do not collect shoppers’ names, email addresses, account credentials, or payment information.

• To provide the core service — generating and returning a room visualisation.
• To meter usage and bill merchants accurately (via Shopify’s Billing API).
• To operate, secure, and prevent abuse of the service (rate limiting, fraud prevention).
• To provide support and respond to your requests.
• To maintain and improve the reliability and quality of the App.

Shopper-uploaded room photos are processed transiently to produce the visualisation and are not stored by Panonamic after the result is returned. We do not use uploaded photos to train AI models, and we do not sell or share them for advertising. The generated preview is returned to the shopper’s browser for the current session.

We do not sell personal information. We share data only with the providers needed to run the App:

• Shopify — the platform the App runs on (authentication, billing, and the merchant data described above).
• AI image provider(s) — the room photo and product image are sent to a third-party AI model provider solely to generate the preview.
• Cloud hosting / infrastructure — to host and run the service securely.

We may also disclose information where required by law or to protect our rights and users.

Merchant settings and configuration are retained while the App is installed and are deleted (along with stored credentials and sessions) when the App is uninstalled or when we receive Shopify’s shop-redact request. Usage and billing records are retained as needed for accounting and legal compliance. Shopper room photos are not retained, as described above.

Depending on your location, you may have rights to access, correct, or delete personal data, and to object to or restrict certain processing. We honour Shopify’s mandatory privacy webhooks (customers/data_request, customers/redact, and shop/redact). Because we do not store shopper personal data, customer data-request and redaction requests are acknowledged and, where applicable, result in deletion of any associated stored records. To exercise a right or ask a question, contact us at support@panonamic.com.

We protect data with encryption in transit (HTTPS), access controls, and the principle of least privilege. Access keys and secrets are stored server-side and are never exposed to the storefront or the browser. No method of transmission or storage is perfectly secure, but we work to protect your information.

Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

The App is intended for merchants and their adult customers and is not directed to children.

We may update this Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by notifying merchants.

Questions about this Policy or your data? Email support@panonamic.com.