Shotmerce

Privacy Policy

SHOTMERCE PRIVACY

Effective: August 14, 2026

Shotmerce is a web and mobile service that turns product photos into sales-channel images. This notice explains the information Shotmerce actually collects and processes, why it is used, and how it is retained and deleted.

1. Information we process

  • Account and social sign-in: We process the email verified by Google or Apple, username/display name, account status, and registration time. The durable login key is not email: it is the provider/issuer plus a one-way hash of the provider subject. Plain provider subjects and emails are not stored in the social-identity table. An Apple refresh token is encrypted on the server so Apple access can be revoked on account deletion. WordPress may retain a hash of an inaccessible random credential, while operator/legacy account passwords are never stored in plain text.
  • Google Sign-In SDK data: The Apple privacy manifest for the Google Sign-In SDK included in the submitted iOS app declares that it may process name, email address, phone number, coarse location, user and device identifiers, other data types, and other usage data for app functionality or analytics. It declares that this data may be linked to identity but is not used for tracking. Shotmerce does not provide a phone-number or location-entry screen and does not request the iOS location permission. The phone-number, coarse-location, and related entries disclose the SDK’s declared technical processing scope; they do not mean that Shotmerce directly asks users for those fields or uses them for advertising tracking.
  • Mobile sessions and web QR connection: Mobile sign-in uses hashes of random access/refresh tokens and a device-scoped random identifier, the platform (iOS or Android), and session timestamps. For web QR sign-in, for five minutes we process keyed hashes of the public selector, browser-only verifier and matching code, a short-lived encrypted copy of that code, general browser/OS names, and approval state. A QR link alone cannot sign in; the same code must be checked and explicitly approved in the phone app. Plain mobile session tokens are not stored in the server database.
  • Selected product photo: We process only the one photo a user selects after pressing Generate and explicitly agreeing to its transfer to OpenAI. The mobile app leaves the original unchanged and creates a newly encoded JPEG upload copy with a maximum edge of 2,048 px; source EXIF location and camera metadata are not included in that re-encoded copy. Shotmerce does not save the original photo to its Media Library or database.
  • AI results and generation records: We process the selected output style, request/processing status, credit cost, OpenAI request identifier, generation timestamps, and completed image. Completed images are stored in private server storage, not as public media.
  • Purchases and credits: We process Apple App Store or Google Play product IDs, store type, a hash of the transaction identifier, purchase/refund events, RevenueCat virtual-currency transaction identifiers, an opaque Shotmerce App User ID beginning with sm_, and the credit balance/ledger. Shotmerce does not receive card numbers or store-account passwords.
  • Security and operations: To prevent login and form abuse, we temporarily process a one-way hash derived from the IP address and attempt counts. Web-server and hosting security logs may include IP address, request time, user agent, and error information. We also process messages and email supplied in support requests.
  • App launch notification: We process the email used to request the official app launch notification, consent time, and notice version. This notification request does not create a Shotmerce account or grant service access. Sales-channel and monthly product-volume ranges from earlier research responses may remain until their 12-month retention deadline, but the current launch-notification form does not collect them.

2. Purposes and grounds for processing

  • Provide the requested service, including authentication, image generation, result recovery, and credits
  • Honor the user’s explicit consent to send the selected photo to OpenAI
  • Verify store purchases, prevent duplicate grants, and handle refunds, disputes, and support
  • Protect authentication, rate-limit abuse, diagnose failures, and prevent fraud and misuse
  • Meet applicable accounting, consumer-protection, dispute, and other legal obligations
  • Email consenting users when the official Shotmerce app becomes available in stores

AI photo-transfer consent is requested for each selected photo. If you do not agree, that photo is not sent to OpenAI and the AI generation does not run.

3. Service providers and international processing

  • OpenAI: Processes the product photo and generation instruction to create an AI image. OpenAI states that API data is not used to train its models unless the customer explicitly opts in, and that default abuse-monitoring logs may be retained for up to 30 days. Processing follows Shotmerce’s OpenAI account settings and the OpenAI data-controls policy.
  • RevenueCat: Processes the opaque App User ID and Apple/Google purchase, refund, and virtual-currency events so credits can be credited correctly. See the RevenueCat Privacy Policy.
  • Apple / Google: They verify identity and verified email during account sign-in, and the Google Sign-In SDK may process the app-functionality and analytics data described above. Each store independently processes in-app payment, payment method, store account, and purchase history. Shotmerce receives provider-signed identity assertions and only the transaction events needed for the service; it does not receive Google/Apple passwords or card numbers. The SDK data is not used for tracking. See Apple privacy information and the Google Privacy Policy.
  • Server hosting/network and email-delivery providers: Process information as needed to operate the service, store private files, maintain security logs, and deliver essential account email.

These providers may process information outside Korea, including in the United States. Their contractual safeguards and privacy terms apply to that international processing.

4. Retention

  • Completed AI image: ordinarily up to 24 hours after generation in Shotmerce private storage and it may be removed sooner on expiry cleanup or a deletion request. The restricted evidence-retention exception below applies to a result the user reports for safety review.
  • Original and upload copy: used only while handling the request and not saved to the Shotmerce Media Library or database. OpenAI-side processing follows the policy and account settings described above.
  • Generation history and account data: retained while the account remains open and removed through the account-deletion workflow.
  • AI result reports: the selected reason, optional description, opaque account and result references, and the reported private result may remain in restricted evidence storage only as long as needed for review, abuse prevention, disputes, or legal obligations. The original image is never shown in the admin report list or notification email.
  • Mobile access tokens last 15 minutes and refresh tokens 30 days. Only token hashes are stored; expired/revoked session rows are removed by scheduled cleanup.
  • Social sign-in challenges and account-deletion reauthentication proofs: valid for five minutes and one use. Web QR sign-in requests: valid for five minutes; expired/completed rows are removed by scheduled cleanup.
  • Rate-limit IP hashes: temporary counters cover 10-minute/daily windows for the launch-notification form and a 15-minute window for mobile login.
  • App launch notification request: 12 months after the last update.
  • Hosting security logs: retained for the period needed under the hosting security configuration and not used for advertising profiles. They may be kept longer for a security investigation or legal obligation.
  • Transaction and credit-audit records: for the period necessary for accounting, refunds, disputes, fraud prevention, or legal obligations. Direct account links are removed when the account is deleted.

5. Account and data deletion

In the app, use Account → Delete account and data, reauthenticate with the same Google or Apple identity linked to Shotmerce, and enter the DELETE confirmation phrase. A signed-in legacy password account can use its current password on the account-deletion web page. If the app or sign-in method is unavailable, use the identity-verification email path described on that page.

On request, we immediately block new work, end all Shotmerce login sessions, and remove recoverable private image files. A result reported for safety review may remain without a direct account link for the restricted evidence period described above. Deletion of the remaining account, email, profile, generation history, and other unnecessary linked data is queued immediately and retried during scheduled maintenance if an attempt fails. Scheduled WordPress tasks can depend on site activity, so contact admin@kcrew.co.kr if processing appears delayed. Temporary provider failures in RevenueCat customer deletion are also retried until accepted.

Minimal transaction and credit records needed for accounting, refunds, disputes, fraud prevention, or law may be retained after direct account identifiers are removed. Purchase history independently held by Apple or Google is not deleted by deleting the Shotmerce account and remains subject to each store’s privacy and payment controls. Shotmerce credits are not an auto-renewing subscription.

6. Safeguards

We use HTTPS transport, encrypted server secrets, hashed authentication tokens/device identifiers/transaction identifiers, private result storage, per-user access controls, rate limiting, signed purchase-event verification, and duplicate prevention. No internet service can guarantee absolute security.

7. Your rights and contact

Depending on applicable law, you may request access, correction, deletion, restriction or objection, withdrawal of consent, or a copy of your personal information. We may need to verify your identity. Privacy and account-deletion contact: admin@kcrew.co.kr.

We may update this notice when the service or legal requirements change. Material changes will update the effective date and, where appropriate, be communicated by account email or in the app. This notice describes the service and is not legal advice.