What personal data Dambl collects, why it is collected, who it is shared with, how long it is kept, and the rights you have over it.
[LEGAL ENTITY] of [REGISTERED ADDRESS] is the controller of the personal data described here. The data protection contact is support@dambl.app.
Where we process images and product records on your instruction as part of running the service, we act as your processor. A data processing addendum for signature is available on request from support@dambl.app.
We collect only what the service needs to run and to be billed correctly.
To run sessions, show your library and write photographs to your store: performance of the contract.
To bill correctly and keep accounting records: performance of the contract and compliance with a legal obligation.
To keep the service secure, diagnose faults and prevent abuse: our legitimate interest in operating a reliable service, balanced against your interests.
To send service messages about outages, security and material changes: legitimate interest. Marketing email is sent only with consent and can be stopped at any time.
We do not sell personal data.
We do not use your product photographs, source images or session instructions to train general purpose image models, and our contract with the generation provider prohibits them from doing so.
We do not publish your images as examples without asking you first and receiving a written yes.
Data is shared only with the parties needed to run the service. There are two. Support is handled over ordinary email rather than a ticketing tool, and the service carries no analytics or advertising product, so neither adds a recipient.
Where data leaves the UK or the European Economic Area, transfers are made under the UK International Data Transfer Addendum or the European Commission's Standard Contractual Clauses, with a transfer risk assessment on file.
The list above is the complete and current subprocessor list; it is maintained on this page rather than a separate register. We give 30 days notice, by email to the account address, before adding a new subprocessor.
Retention periods are set out in full in the Images and data policy. In summary: generated photographs are kept for as long as the account is open, because their point is that you can come back to them; everything tied to the account is deleted within 48 hours of uninstall; billing records are kept for seven years; operational logs rotate automatically.
Subject to the law that applies to you, you may ask for a copy of your data, ask for it to be corrected or deleted, object to processing based on legitimate interests, ask us to restrict processing, and ask for a portable export.
Write to support@dambl.app. We respond within 30 days and will not charge for a first request.
If you are not satisfied with our answer you may complain to the data protection authority for the country you live or work in. You do not need to come to us first.
The embedded application uses only cookies that are strictly necessary for session authentication inside the Shopify admin.
The public website sets no cookies at all. It runs no analytics, no advertising tags and no cross-site tracking, so there is no cookie table to publish and no consent banner to click.
Questions about this document go to support@dambl.app. Where a term here conflicts with the Shopify Partner Program Agreement or the Shopify Terms of Service, those terms prevail for matters they govern.