Live Palette privacy policy
Last updated: 5 October 2026 (usage counts added the same evening).
Live Palette ("the app") is operated by Alejandro Carbajo, an independent developer in Spain. Contact: [email protected].
What the app stores
We keep the least data the app needs to work.
| Data | Why | How long |
|---|---|---|
| Your shop's domain and the access token Shopify issues at install | To read your catalog and answer the widget | Until you uninstall; the token is deleted at uninstall |
| Your product catalog: titles, descriptions, tags, product types, prices, image links, collection names and which products are in them | To learn which notes and moods each product carries | Until Shopify sends the shop/redact request after uninstall |
| Compiled facet probabilities per product (numbers between 0 and 1, such as "carries rose: 0.97") | To rank products without re-reading them | Same as the catalog |
| Your plan status | To know which plan's limits apply | Same as the catalog |
| Per read: time, latency, token count and the returned probabilities, with no sentence text | To run the service and check its answers | 90 days |
| The dates your shop installed and uninstalled, the date of its first storefront read, and how many sentences shoppers typed per day (a number, never the text) | To count how the app is used and when to ask for a review | Until Shopify sends the shop/redact request after uninstall |
| On the public "see it on your store" page (/try): the store addresses typed there and daily counts of visits and button clicks, with no IP address or visitor detail | To count how many stores try the app | 24 months |
Shopper sentences are not stored. The sentence a shopper types is sent to TypeSafe AI to be read and the answer comes back as probabilities. The app keeps neither the sentence nor any link between it and a person. The app never receives customer names, emails, orders, addresses or payment details, and it sets no cookies on your storefront. The storefront widget reaches the app through Shopify's App Proxy, which strips cookies in both directions.
Who processes data for us
| Subprocessor | What they receive | Where |
|---|---|---|
| TypeSafe AI, Inc. (the Jev model) | Product listing text at compile time; each shopper sentence at read time | United States |
| DigitalOcean, LLC (hosting and database) | Everything in the table above | United States (San Francisco) |
TypeSafe AI's handling of request content is governed by its own terms (https://typesafe.ai). The app sends it only the product text and the sentence, never a name, email or other detail about a shopper.
Shopify's privacy webhooks
The app subscribes to Shopify's three mandatory compliance webhooks and verifies Shopify's signature on each:
- customers/data_request: the app holds no customer data, so the answer is that there is nothing to report. We reply to the merchant within 30 days if they ask.
- customers/redact: there is no customer data to erase.
- shop/redact (sent after a shop uninstalls): every record for that shop is deleted: catalog, compiled probabilities, plan status, usage counts and any remaining access tokens.
Your rights
Merchants can ask us at [email protected] for a copy of the data we hold about their shop or for its deletion at any time. Shoppers can write to the same address; because we store nothing about them, there will be nothing to return.
Changes
We will post changes to this policy on this page and update the date above.