Privacy Policy

Saul Studio. (“we”, “us”, “our”) operates the Smart Emails application for Shopify. We are the data controller for the personal data processed through our app.

Saul Studio.
Owner: Manfred Saul
Ziegelofenweg 2a
67346 Speyer, Rheinland-Pfalz
Germany
Email: support@saulstudio.app

Smart Emails accesses the following data from your Shopify store through Shopify's APIs:

• Products: Title, price, images, handle, vendor — used to render product listings in email templates.
• Orders: Order number, line items, totals, shipping/billing addresses, payment details — used to render transactional email previews.
• Customers: First name, last name, email address — used to personalize email previews with recipient information.
• Shop: Store name, contact email, billing address, currency, money format — used for branding and formatting in emails.

We request only the minimum data necessary to provide the email template editing service. We do not request API scopes beyond what is required for core functionality.

In addition to Shopify API data, we collect:

• Editor configuration: Your design settings (colors, typography, layout, section order) — stored to preserve your work.
• Consent records: Timestamps of when you accepted our Privacy Policy, Terms of Service, and DPA during onboarding.
• Export history: Copies of exported HTML templates — stored for version management.

Smart Emails does not use cookies on your store or your customers' devices. We do not track how customers visit or navigate your store. The only session mechanism used is Shopify's built-in OAuth session token.

Email Analytics: Smart Emails provides optional email analytics for merchants. When enabled by the merchant, exported email templates may include:

• A tracking pixel (1x1 transparent image) to measure email open rates
• Click tracking via redirect URLs to measure which links recipients click

This data is collected on behalf of the merchant (Data Controller) and includes: timestamp, anonymized IP address (truncated), email client information, and the link clicked. No cookies are set. No cross-site tracking occurs. The merchant can enable or disable analytics per template. Analytics data is retained for the duration of the app installation and deleted within 30 days of uninstallation.

We process your data exclusively for the following purposes:

We do not use your data for advertising, profiling, or any purpose unrelated to the email editor and analytics functionality. We do not sell, rent, or share your data with third parties for their own purposes.

Persistent storage: Your editor settings, consent records, export history, and email analytics data are stored in our database hosted on PlanetScale (EU region, Frankfurt).

Transient data: Customer, order, and product data is fetched from Shopify's API on each page load for preview purposes only. This data is not persistently stored in our database and is discarded after the session ends.

Retention period: Your data is retained for as long as the app is installed on your Shopify store. After uninstallation, we receive Shopify's shop/redact webhook and permanently delete all associated data within 30 days.

Our database (PlanetScale) is hosted in the EU region (Frankfurt). Google Cloud Translation is currently accessed through its global endpoint; submitted email template text is held briefly in memory to provide the translation and is not used to train Google's translation models. Our application runs on Cloudflare's global edge network; requests are processed at the network location nearest the visitor, while persistent personal data stored by Smart Emails remains in the EU. We are established in the European Union.

We handle the following mandatory Shopify compliance webhooks:

• Customer data request (customers/data_request): When a customer requests their data, we provide it to the store owner within 30 days.
• Customer data erasure (customers/redact): When a store owner requests deletion of customer data, we delete it within 30 days.
• Shop data erasure (shop/redact): After app uninstallation, we delete all shop data within 30 days.

Under GDPR (EU/EEA)

You have the right to:

• Access (Art. 15): Request a copy of the personal data we hold about you.
• Rectification (Art. 16): Request correction of inaccurate data.
• Erasure (Art. 17): Request deletion of your data (also achievable by uninstalling the app).
• Restriction (Art. 18): Request limitation of data processing.
• Portability (Art. 20): Request your data in a structured, machine-readable format.
• Objection (Art. 21): Object to processing of your data.
• Lodge a complaint with your local data protection authority.

Under CCPA/CPRA (California)

California residents have the right to:

• Know what personal information is collected and how it is used
• Request deletion of personal information
• Opt out of the sale of personal information — we do not sell personal information
• Non-discrimination for exercising privacy rights

Under PIPEDA (Canada)

Canadian users have the right to access, correct, and challenge the handling of their personal information.

To exercise any of these rights, contact us at support@saulstudio.app. We respond to all requests within 30 days.

We implement appropriate technical and organizational measures to protect your data:

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Row-level security (RLS) policies on the database
• Authentication exclusively through Shopify OAuth — no separate credentials stored
• No persistent storage of Shopify API tokens beyond the session
• Access to production systems limited to authorized personnel

Smart Emails is a business tool for Shopify merchants. We do not knowingly collect personal information from children under 13 (COPPA) or under 16 (GDPR). If you believe a child has provided us with personal data, contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. Significant changes will be communicated through the app at least 14 days before they take effect. The “Last updated” date at the top indicates when the policy was last revised.

If you have questions about this Privacy Policy or our data practices:

Saul Studio.
Owner: Manfred Saul
Ziegelofenweg 2a
67346 Speyer
Germany
support@saulstudio.app