Privacy Policy
Last updated: June 10, 2026
This Privacy Policy describes how Vision3D ("Product-3D-Viewer", "we", "us", or "our") collects, uses, and discloses your personal information when you install and use our Shopify application.
1. Information We Collect
When you install and use Vision3D, we may collect the following types of information:
- Store Information: Your Shopify store domain, store name, and store owner email address, which are provided by Shopify during app installation.
- Product Data: Product IDs, product titles, and product images that you choose to associate with 3D models through our app.
- 3D Asset Data: URLs of 3D model files (.glb, .gltf, .usdz) that you upload or link within the app.
- Usage Analytics: Aggregated, anonymized data about 3D viewer interactions (views, AR activations, session duration) on your storefront. This data is used solely for your dashboard analytics and is not shared with third parties.
2. How We Use Your Information
We use the collected information exclusively for the following purposes:
- To provide and maintain the Vision3D 3D viewer functionality on your Shopify store.
- To convert 3D models between formats (e.g., GLB to USDZ) using CloudConvert's secure API.
- To display aggregated analytics on your app dashboard (views, AR usage statistics).
- To communicate with you regarding service updates, billing, and technical support.
- To comply with legal obligations and enforce our terms of service.
3. Data Sharing and Third-Party Services
We share your data only as strictly necessary to operate the service:
- Shopify: We operate entirely within the Shopify platform. All data access is governed by Shopify's API terms and the permissions (scopes) you grant during installation.
- CloudConvert: When you request GLB-to-USDZ conversion, your 3D model file URL is transmitted to CloudConvert's API (CloudConvert Privacy Policy) solely for the purpose of file format conversion. The converted file is returned to your Shopify store.
- Vercel: Our application is hosted on Vercel (Vercel Privacy Policy). Vercel may process basic request metadata (IP addresses, timestamps) as part of their infrastructure operations.
We do not sell, rent, or trade your personal information to any third party for marketing or advertising purposes.
4. Data Retention and Deletion
We retain your store data only for as long as you have Vision3D installed on your Shopify store. When you uninstall the app:
- All session tokens and authentication data are immediately deleted from our database.
- All analytics data (view counts, AR usage stats) associated with your store is permanently deleted within 48 hours of uninstallation.
- Shopify may separately retain app-related metafields on your products. You can manually remove these metafields from your Shopify admin.
5. GDPR and Data Subject Rights
If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):
- Right of Access: You may request a copy of the personal data we hold about your store.
- Right of Rectification: You may request correction of inaccurate or incomplete data.
- Right of Erasure: You may request deletion of your personal data. Uninstalling the app automatically triggers this process.
- Right to Data Portability: You may request your data in a structured, machine-readable format.
To exercise any of these rights, please contact us at the email address listed in the "Contact Us" section below. We respond to all verified requests within 30 days.
We also comply with Shopify's GDPR mandatory webhooks for customer data requests, customer data erasure, and shop data erasure.
6. Data Security
We implement appropriate technical and organizational measures to protect your data:
- All data transmission occurs over HTTPS/TLS encryption.
- Authentication is handled exclusively through Shopify's OAuth 2.0 protocol.
- API keys and secrets are stored as encrypted environment variables and are never exposed to client-side code.
- Database access is restricted through connection-level authentication and is not publicly accessible.
7. Cookies and Tracking
Vision3D does not use any first-party cookies or browser-based tracking technologies on your storefront. The 3D viewer widget on your store operates entirely through Shopify's standard rendering pipeline. We use Google's model-viewer library (loaded via CDN) solely for rendering 3D content — this library does not set tracking cookies.
8. Children's Privacy
Vision3D is a business-to-business application designed exclusively for Shopify merchants. We do not knowingly collect personal information from children under the age of 16. If you believe a child has provided us with personal data, please contact us immediately.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will notify you through the Shopify App Store listing or via email. Continued use of Vision3D after such changes constitutes acceptance of the updated policy.
10. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: