Privacy notice

Operated by Meridaxa Software. Contact: support@meridaxasoftware.com.

What the app processes

Shopify order references, customer names and email addresses, artwork previews, production details, revision requests, approvals, fee quotes, and payment references are processed to provide the proofing workflow. Stored customer details, notification payloads, artwork, and Shopify access tokens are encrypted. Payment card details are handled by Shopify and are not stored by this app.

How information is used

Information is used to show private proofs, record customer decisions, prepare merchant-approved revision invoices, send transactional notifications, and maintain the studio’s work queue. It is not sold or used to train AI models.

Service providers

Hosting and private artwork storage use Hetzner in Finland. Transactional email uses Resend in Ireland. Email delivery records can include recipient addresses and message contents. Encrypted recovery copies are kept in an operator-managed OneDrive folder. Customer artwork is available through authenticated studio access or a private review link. Anyone receiving that link can review the associated job until the link expires or is revoked.

Retention and deletion

Merchants configure retention for finished jobs, defaulting to 365 days without activity. They can export records and delete jobs. Customer review links expire after 90 days. Shopify privacy webhooks support data requests and deletion. Application backups retain seven snapshots on the server and seven encrypted recovery copies. Deleted data can remain in those backups until they are replaced. Before restoring service from an older backup, the operator must reapply subsequent deletion requests.

Your requests

Customers should contact the merchant for access, correction, or deletion requests. Merchants can also contact the app operator. These requests are reviewed against applicable recordkeeping obligations.