ProofLivo
Français Try the demo

Personal data

Privacy policy

What ProofLivo stores, why, for how long, and how to exercise your rights. The durations below are the ones configured in the app, not general promises.

Last updated 2026-10-09

In brief
Who is responsible
The workshop that installs ProofLivo (the merchant) remains responsible for its customers' data. The publisher of ProofLivo processes it on the merchant's behalf, on its instructions.
What data
For the team: Shopify user id, name, optional email, role, language. For customers: name, email, language and order reference passed on by Shopify, review files and comments, decisions.
Why
Prepare production files, share proofs, collect and record approvals, send review and reminder emails, track production. No advertising, no resale.
How long
While the app is installed, with the files of a completed or cancelled dossier deleted 12 months after it is closed (or earlier if the merchant archives it). After uninstallation, deletion at Shopify's request, 48 hours later. Links, images and exports have short lifetimes, detailed below.
Where
Files in a private storage bucket (Cloudflare R2), database with the publisher's hosting provider. Never a public URL to a file.
Your rights
Access, rectification, deletion, through the merchant for its customers. The merchant can export or erase a customer's data from the app.
In detail

1. Who we are

ProofLivo is a Shopify app used by workshops (“merchants”) to collect artwork approvals from their customers. The merchant remains responsible for its customers’ data; ProofLivo processes it on the merchant’s behalf.

2. Data we process

For merchants: shop domain, team members (Shopify user id, display name, optional email, role, language). For the merchant’s customers: order reference, line items, customer name, email and language as provided by Shopify, the files and comments exchanged during approval, and the approval decisions (date, version, fingerprint). The marketing site sets no cookie and measures only three anonymous events (demo start and completion, install click), ignored when your browser asks not to be tracked.

3. Why

To create production files from orders, share proofs, record approvals, notify by email and track production. Nothing is used for advertising or sold.

4. Retention

Data is kept while the app is installed. The files (proofs and originals) of a completed or cancelled dossier are deleted from storage 12 months after it is closed, or earlier if the merchant archives the dossier; the approval record, decisions and comments are kept. After uninstallation, everything is deleted when Shopify sends the shop deletion request, 48 hours later. Customer deletion requests from Shopify are honoured by erasing name, email and language on the affected orders.

App installed
Dossiers, versions, decisions and comments kept as long as the merchant keeps them; a completed dossier stays readable. The files of a completed or cancelled dossier are deleted 12 months after it is closed, or earlier if the merchant archives it.
After uninstallation
Full deletion when Shopify sends the shop deletion request (48 hours later).
Review links
30 days by default, adjustable from 1 to 365 days by the merchant; revocable at any time.
Image links
5 minutes. Every display of the customer page generates new temporary links.
Export files
7 days, then automatic purge.
Customer erasure request
Passed on by Shopify or made by the merchant: name, email and language erased on the affected orders; decisions remain without identity.

5. Storage and security

Files are stored in a private bucket, never public, and served through temporary links. Approval links are random, expiring and revocable. Access tokens are encrypted at rest. Every uploaded file is checked (real type, fingerprint) before it can be used.

6. Sub-processors

Hosting provider, Cloudflare R2 (file storage) and an email delivery provider. The exact list is provided by the app publisher.

7. Your rights

Customers exercise their rights through the merchant (access, rectification, deletion). Merchants can export customer data from the app to answer such requests, and ask the publisher for help at the contact address.

To be completed by the publisher before publication

Legal entity, contact address, named list of sub-processors and hosting country. This page is not a legal notice until that information appears on it.