Images, data and retention
Where your source photographs live, what happens to the photographs a shoot generates, who processes them, and exactly when each class of data is deleted.
Source images stay in Shopify
Source images are the photographs already attached to a product in your store. Dambl reads them to run a shoot. It does not build a library of them, and it never removes or alters an original — a push to a product adds a photograph and takes nothing away.
A read happens only when you open a product in the application or start a shoot against it.
Two things are stored on our side, and they are the exception to the heading. Where a shoot needs a detail out of a source photograph, the crop it took is kept with that shoot's records. And an image you upload yourself as a reference is stored, with a thumbnail of it. Both are kept while the account is open and are deleted with it, under 3.4.
Generated photographs
Photographs a shoot returns are stored on our infrastructure so that you can review, compare and re-shoot them before deciding what to keep.
They are kept for as long as your account is open. There is no automatic expiry, because a library you cannot return to is not a library — a photograph you shot in March is still there in December. They are deleted when the account is deleted, or sooner if you ask.
Downloading a photograph or pushing it to a product copies it out of our store; that copy is yours and is unaffected by any deletion here. Photographs pushed to a Shopify product become part of your store's media and are governed by your own arrangements with Shopify from that point.
The generation step
Image generation is performed by Google Cloud Vertex AI (Gemini image models), accessed with our own Google Cloud service account — not the consumer Gemini API or an AI Studio key. Source images and the text of the instructions you give a shoot are transmitted to that provider for the sole purpose of producing your photographs.
Before a product's first shoot, a web search through Google learns how that kind of product is photographed, and it receives the product's title, its type, its description and one photograph of it; the result is kept against that product, so the search runs once rather than on every shoot.
Use of Google Cloud Vertex AI is governed by Google Cloud's platform terms, under which submitted content is not used to train Google's models. Google states its own handling and retention for that service; we do not restate their period here, because it is theirs to change and ours to pass on.
Because the generation runs on Google's platform, what you ask for is also subject to Google's Generative AI Prohibited Use Policy, at https://policies.google.com/terms/generative-ai/use-policy. Google can refuse a request under that policy whatever this document says, and clause 5 is written to stay inside it.
If we change generation provider we will update clause 2.5 of the privacy notice and give 30 days notice by email before the change takes effect.
Retention at a glance
Uninstalling
Uninstalling the application revokes our access to your store immediately. No further reads or writes are possible.
Shopify notifies us and the account is erased within 48 hours. Shoot records and library entries go with it, and so do the image files themselves: the handler collects every file the account's rows name — generated photographs, thumbnails, references, crops — and unlinks them from disk as the account row is deleted. Billing records are retained under clause 3.4.
If you want deletion sooner than the scheduled window, write to support@dambl.app and we will action it within 7 days.
Security
Data is encrypted in transit with TLS 1.2 or above. On disk it is not separately encrypted: the database and the image files sit on ordinary volumes on the servers we operate, and we would rather say so than imply a layer that is not there.
Dambl is operated by one person. Production access is limited to that operator, over key-based authentication, and is logged. There is no shared account and no standing third-party access.
Every release runs an automated test suite that includes the credit ledger, webhook verification and the access controls on stored images. We hold no third-party security certification and do not claim one; if you need a security review before installing, write to support@dambl.app and we will answer specific questions in writing.
If a personal data breach occurs we notify the relevant supervisory authority within 72 hours where required, and affected merchants without undue delay.
Questions about this document go to support@dambl.app. Where a term here conflicts with the Shopify Partner Program Agreement or the Shopify Terms of Service, those terms prevail for matters they govern.
