Privacy Policy

1. Introduction

Welcome to ImgAura ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our image conversion service, including when accessed through the Shopify App Store.

By using ImgAura, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

When you create an account or contact us, we may collect:

• Email address
• Name (when provided in contact forms)
• Profile information you choose to provide
• Communication preferences

2.2 Usage Information

We automatically collect information about how you use our service:

• Files uploaded and conversion history
• Service usage patterns and preferences
• Device information and browser type
• IP address and general location information
• Performance and error logs
• Shopify store domain and merchant ID (when installed via Shopify)
• Product, collection, and variant image URLs accessed via Shopify APIs
• OAuth access tokens issued by Shopify for API authentication

2.3 Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your login session
• Remember your preferences
• Analyze service usage with Google Analytics
• Improve our service performance

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To provide, maintain, and improve our image conversion services
• Account Management: To create and manage your account, including authentication and subscription management
• Communication: To respond to your inquiries, send service updates, and provide customer support
• Analytics: To understand how our service is used and to improve user experience
• Security: To detect, prevent, and address technical issues and security threats
• Legal Compliance: To comply with applicable laws and regulations

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

4.1 Third-Party Services

• Stripe: For payment processing (Pro and Enterprise subscriptions)
• Google Analytics: For website analytics and usage insights

4.2 Shopify Integration

When you install ImgAura from the Shopify App Store, we receive access to your Shopify store data through Shopify's OAuth authentication. We access and process the following store data:

• Product images: To read, optimize, and publish images back to your store
• Collection images: To read and optimize collection-level media
• Variant images: To process images associated with specific product variants
• Theme assets: When needed to publish optimized images through your storefront
• Store metadata: Store domain, shop ID, and currency for account linking

We do not access, collect, or process your customers' personal data. ImgAura only interacts with image assets and store configuration necessary for image optimization.

Shopify acts as a data processor for store data accessed via the Shopify API. Our use of Shopify API data is governed by Shopify's App Terms of Service and the Shopify API License Terms.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

5. Data Retention

5.1 User Account Data

We retain your account information until you delete your account or request data deletion.

5.2 Shopify Store Data & Backups

When you use ImgAura through Shopify, we retain:

• Optimized images: Stored for the duration of your subscription to enable restore functionality
• Original image backups: Retained for 30 days after optimization to allow one-click restore
• Conversion logs: Processing history retained for 90 days for audit and support purposes

When you uninstall ImgAura from your Shopify store, we initiate automated data deletion:

• OAuth access tokens are revoked immediately
• All cached and optimized images are deleted within 48 hours
• Store metadata is removed from our systems within 30 days
• You may request immediate deletion by contacting contact@imgaura.com

5.3 Converted Files

• Anonymous Users: Files are deleted after 1 hour
• Free Tier: Files are deleted after 1 hour
• Pro Tier: Files are retained according to your subscription terms
• Enterprise Tier: Files are retained according to your subscription terms

5.4 Analytics Data

Analytics data is retained for up to 26 months as per Google Analytics standard retention policy.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of data in transit and at rest
• Secure authentication using JWT tokens
• Regular security audits and updates
• Access controls and monitoring
• Automatic file cleanup and secure deletion

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Opt-out: Opt out of marketing communications
• Cookie Control: Manage cookie preferences through your browser settings

To exercise these rights, please contact us at contact@imgaura.com.

8. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

9. International Users

ImgAura is operated from various locations. If you are accessing our service from outside your country of residence, please be aware that your information may be transferred to, stored, and processed in countries that may have different privacy laws than your country of residence.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending you an email notification for significant changes

Your continued use of our service after any changes constitutes acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 days of receipt.