Privacy Policy for Multiple Variant Images

Last Updated: January 25, 2026

Introduction

Multiple Variant Images ("the App") is operated by Hey Jak. This Privacy Policy explains how we collect, use, and protect information when you use our Shopify app.

Information We Collect

Store Information

  • Shop domain and authentication tokens

  • Product data (titles, variants, options, images, videos, and 3D models)

  • Product metafield data for gallery configuration

Technical Data

  • Webhook event logs (shop domain, event type, timestamp)

  • App usage data for functionality purposes

What We Don't Collect

  • We do not collect, store, or process any customer personal information

  • We do not collect end-user browsing data

  • We do not track shopping behavior

How We Use Your Information

We use collected information solely to:

  • Display variant-specific media galleries on your storefront

  • Store your product configuration preferences

  • Process billing through Shopify's payment system

  • Maintain app functionality and troubleshooting

Data Storage

  • Product Configuration: Stored in Shopify metafields within your store

  • App Data: Securely stored in our PostgreSQL database hosted on Render

  • Session Data: Maintained for authentication purposes

Data Sharing

We do not sell, trade, or share your data with third parties. Data is only accessed by:

  • Shopify (through their official APIs)

  • Our secure infrastructure (Render hosting)

Data Retention and Deletion

Automatic Deletion

  • When you uninstall the app, session data is immediately deleted

  • Within 48 hours of uninstallation, all associated shop data is permanently removed from our database

GDPR Compliance

We comply with all GDPR requirements:

  • Customer Data Requests: We respond to customer data access requests within required timeframes

  • Data Redaction: Customer data is deleted upon request

  • Shop Data Redaction: All shop data is permanently deleted 48 hours after app uninstallation

Manual Deletion Requests

You may request immediate data deletion by contacting us at mail@heyjak.com

Data Security

We implement industry-standard security measures:

  • Shopify OAuth authentication

  • HTTPS encryption for all data transmission

  • Secure database access controls

  • Regular security updates

Your Rights

You have the right to:

  • Access your data stored by the App

  • Request correction of inaccurate data

  • Request deletion of your data

  • Withdraw consent for data processing

API Permissions

The App requires the following Shopify API permission:

  • write_products: To store media gallery configuration in product metafields

Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date.

Contact Us

For privacy-related questions or requests, contact us at: