Privacy policy

Who is responsible: Silvan Jost, Schmiedstrasse 28, 3284 Fräschels, Switzerland ("we"). Contact for privacy questions: [email protected].

What we process

Glossmill Translate is a Shopify app. It works only on the store that installs it. We process:

Installation data: the store's myshopify.com address, the access token Shopify issues to the app, the permissions granted, the install and uninstall dates, and the plan and price you chose.
Your settings: your glossary (terms and their translations) and tone settings (formal or informal address, a short brand-voice note) per language.
Translation job records: per language, the job's status, progress, the number of words translated and model tokens used, and the last error message, if any.
Store content, in transit only: to translate your store we read its text (products, product options, collections, pages, blogs, articles, menus and policies) from Shopify, send it to our translation model provider, and write the translations back to your store through Shopify. We don't keep a copy of this content; the translations live in your Shopify store.
No customer data: the app doesn't read or store your customers' personal data or orders.
Email: if you write to [email protected], your message and address.
Website page views: cookieless, aggregate page-view counts on glossmill.com (date, page, and the referring site or campaign tag). No cookies, no IP addresses, no visitor profiles.

Why (purpose and legal basis)

To provide the translation service you installed and bill for it through Shopify (performance of a contract), and to keep the service secure and working (legitimate interest). We don't sell data or use it for advertising.

Who processes it for us

Cloudflare, Inc. (USA): hosting of the app (Workers) and database (D1), the website (Pages), and receiving email (Email Routing).
Shopify (Shopify Inc., Canada, and its affiliates): the platform the app runs on and the billing of your plan; your use of Shopify is governed by Shopify's own terms and privacy policy.
Anthropic, PBC (USA): translates your store's text (Claude models through Anthropic's API), and helps sort emails sent to [email protected]; replies written with AI help say so.
Resend (USA): sending the automatic acknowledgement and replies to emails you send us.

Some of these providers are outside Switzerland and the EU. Transfers rely on the providers' standard contractual clauses or equivalent safeguards.

How long we keep it

Installation data, settings and job records: while the app is installed. When you uninstall it, the access token is deleted at once; everything else is deleted when Shopify asks us to (48 hours after uninstalling), and at the latest within 7 days by a daily cleanup.
Translation job records: finished jobs are deleted after 90 days; the latest job per language is kept while the app is installed, to show its status.
Translations in your store: they belong to your store and stay there after uninstalling; you can edit or delete them in Shopify.
Billing records: kept by Shopify, not by us.
Emails: as long as needed to answer, then deleted within 12 months.

Your rights

You can ask for access to, correction, export or deletion of your data, and object to processing, by writing to [email protected]. The app's "Export" buttons give you your glossary and your store's translations as CSV at any time. You can also complain to a data protection authority (in Switzerland the FDPIC; in the EU, the authority where you live).

Changes

We will post changes on this page with a new date. Material changes are announced to subscribers by email before they apply.