Appearance
Privacy Policy
Effective Date: April 9, 2026 Last Updated: April 9, 2026
Zorever EcomTech Private Limited ("PixoKit", "we", "us", or "our") operates PixoKit, an AI-powered product photography platform available as a Shopify application. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use our services.
By installing or using the PixoKit app, you consent to the data practices described in this Privacy Policy. If you do not agree with this policy, please do not install or use PixoKit.
1. Who We Are
| Detail | Information |
|---|---|
| Company Name | Zorever EcomTech Private Limited |
| CIN | U62099UT2025PTC019141 |
| Registered Address | Ujala Nagar, Bareilly Road, Haldwani (Dist: Nainital) - 263139, Uttarakhand, India |
| Privacy Contact | contact@zorever.com |
| Grievance Officer | Afzal Hussain — legal@zorever.com |
2. What Data We Collect
2.1 Data Collected Through Shopify APIs
When you install PixoKit and authorize access through Shopify OAuth, we access the following data:
| Data | Purpose | Stored? |
|---|---|---|
| Store domain (e.g., yourstore.myshopify.com) | App identification and API communication | Yes |
| Store owner email | Account management and communication | Yes |
| OAuth access token | Authenticating API requests to your Shopify store | Yes (encrypted) |
| Product data (titles, descriptions, images, variants) | Displaying products and processing AI image generation | No — fetched on-the-fly from Shopify CDN, not stored |
2.2 Data Collected Directly from You
| Data | Purpose | Stored? |
|---|---|---|
| Brand Kit preferences (colors, lighting, mood, themes) | Customizing AI-generated images for brand consistency | Yes |
| AI Model profiles (name, gender, age range, style preferences) | Creating reusable AI models for virtual try-on | Yes |
| Generation preferences (templates, prompts, style choices) | Fulfilling your image generation requests | Yes (as part of job metadata) |
2.3 Data Generated by Our Service
| Data | Purpose | Stored? |
|---|---|---|
| AI-generated images | The output deliverable of our service | Yes (until uninstall) |
| Image generation job metadata (job type, status, timestamps) | Job tracking and generation history | Yes |
| Credit transaction records (credits used, reason, timestamps) | Billing audit trail | Yes |
2.4 Data We Do NOT Collect
- End-customer personal data — We do not collect, access, or store the names, emails, addresses, phone numbers, or payment information of your store's customers.
- Order data — We do not access or store your order information.
- Customer browsing behavior — We do not track how your customers browse your store.
- Cookies for tracking — PixoKit runs as an embedded Shopify app using session tokens, not cookies.
3. How We Use Your Data
We use the data we collect for the following purposes:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Providing the service — generating AI images, managing your account, displaying your gallery | Store data, product images, Brand Kit, generation preferences | Contract performance |
| Billing and credits — tracking credit usage, managing subscriptions | Credit transactions, store data | Contract performance |
| Communication — responding to support requests, sending service notifications | Store owner email | Contract performance |
| Marketing communications — product updates, feature announcements, promotional offers | Store owner email | Consent (you may opt out at any time) |
| Service improvement — improving the quality of our AI image generation services | Generated images and input images used during generation | Legitimate interest / Consent |
| Analytics — understanding usage patterns, improving user experience | Usage data, aggregated statistics | Legitimate interest |
| Legal compliance — responding to legal requests, enforcing our terms | All data as necessary | Legal obligation |
Service Improvement and AI Training
We may use generated images and input images provided during the generation process to improve the quality of our AI services. Your store product catalog data is not used for this purpose. You may opt out of this usage at any time by contacting us at contact@zorever.com.
4. Third-Party Service Providers
We engage third-party service providers to help deliver our services. These providers process data solely on our behalf and as necessary to provide their services to us.
Categories of third-party service providers:
| Category | Purpose | Data Shared |
|---|---|---|
| AI processing providers | Image generation, background replacement, virtual try-on, background removal | Product images, generation parameters |
| AI language model providers | Prompt optimization for image generation | Text prompts (product titles, brand kit settings, template selections) |
| Cloud infrastructure providers | Data storage and hosting | Generated images, application data |
| Analytics providers | Service usage analytics and improvement | Aggregated, anonymized usage data |
| Payment processing | Subscription billing | Handled entirely by Shopify — we do not process payments directly |
We do not sell, rent, or share your personal data with third parties for their own marketing or advertising purposes.
5. Data Storage and Security
Storage
- Personal data and application data are stored in encrypted databases.
- Generated images are stored on secure cloud infrastructure.
- OAuth access tokens are stored in encrypted form.
Security Measures
We implement reasonable security safeguards to protect your data, including:
- Encryption of data at rest and in transit (TLS/HTTPS)
- Encrypted storage of access tokens and sensitive credentials
- HMAC verification on all incoming Shopify webhook requests
- Access controls limiting data access to authorized personnel
- Regular security assessments
While we take reasonable measures to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data (store info, email, access token) | While subscription is active. Deleted within 30 days of app uninstall. |
| Brand Kit and Model profiles | While subscription is active. Deleted within 30 days of app uninstall. |
| Generated images | While subscription is active. Deleted within 30 days of app uninstall. |
| Image job metadata | While subscription is active. Deleted within 30 days of app uninstall. |
| Credit transaction records | While subscription is active. Anonymized records may be retained for up to 1 year after uninstall for financial and legal purposes. |
| Anonymized generated images | May be retained for up to 1 year after uninstall for service improvement purposes. These images are stripped of all store identifiers, product IDs, and merchant information and cannot be traced back to you. |
When you uninstall PixoKit, we delete all identifiable data associated with your store within 30 days, in compliance with Shopify's data protection requirements.
7. Cross-Border Data Transfers
PixoKit is operated from India. Your data may be processed by third-party service providers located in countries outside of India, including but not limited to the United States and the European Union.
We ensure that any cross-border data transfers are conducted in compliance with applicable data protection laws. As of the effective date of this policy, the Government of India has not restricted data transfers to any specific country under the Digital Personal Data Protection Act, 2023.
If you are located in the European Economic Area (EEA), please note that India does not currently have an adequacy decision from the European Commission. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) for data transfers.
8. Your Rights
For All Users
You have the right to:
- Access — Request information about what personal data we hold about you
- Correction — Request correction of inaccurate or incomplete personal data
- Deletion — Request deletion of your personal data (subject to legal retention requirements)
- Withdrawal of Consent — Withdraw your consent for data processing at any time. Withdrawal is as easy as giving consent — email us at contact@zorever.com
- Opt-out of Marketing — Unsubscribe from marketing communications at any time via the unsubscribe link in any email or by contacting us
- Opt-out of Service Improvement — Request that your generated images not be used for AI service improvement
To exercise any of these rights, contact us at contact@zorever.com. We will respond within 30 days.
Additional Rights Under India DPDPA 2023
If you are a Data Principal under the Digital Personal Data Protection Act, 2023 (India):
- Right to Grievance Redressal — You may raise a complaint with our Grievance Officer: Afzal Hussain at legal@zorever.com. We will respond within 90 days.
- Right to Nominate — You may nominate another person to exercise your rights in the event of your death or incapacity.
- Right to Complain to the Data Protection Board of India — If you are unsatisfied with our response, you may file a complaint with the Data Protection Board of India (DPBI).
Additional Rights Under EU GDPR
If you are located in the European Economic Area (EEA):
- Right to Restrict Processing — Request that we limit how we process your data
- Right to Data Portability — Receive your personal data in a structured, machine-readable format
- Right to Object — Object to processing based on legitimate interest
- Right to Complain — Lodge a complaint with your local data protection supervisory authority
9. Shopify Data Compliance
PixoKit complies with Shopify's mandatory data protection requirements:
- Customer Data Requests (
customers/data_request) — We respond to customer data access requests forwarded by Shopify. PixoKit does not store end-customer personal data. - Customer Data Deletion (
customers/redact) — We respond to customer data deletion requests forwarded by Shopify. As we do not store end-customer personal data, no customer data requires deletion. - Store Data Deletion (
shop/redact) — When you uninstall PixoKit, we receive a notification from Shopify and delete all identifiable data associated with your store within 30 days.
10. Children's Privacy
PixoKit is intended for use by business owners and authorized representatives who are at least 18 years of age. We do not knowingly collect personal data from individuals under 18. If we become aware that we have collected data from a person under 18, we will delete it promptly.
11. Analytics and Tracking
PixoKit may use analytics tools to understand how merchants use our app and to improve the user experience. Any analytics data collected is aggregated and anonymized where possible.
As an embedded Shopify app, PixoKit uses Shopify session tokens for authentication — not browser cookies. If we introduce any cookies or tracking technologies in the future, this policy will be updated accordingly.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Notify you via the app or email for significant changes
Your continued use of PixoKit after any changes constitutes your acceptance of the updated Privacy Policy.
13. Contact Us
For any questions or concerns about this Privacy Policy, your data, or to exercise your rights:
| General Privacy Inquiries | contact@zorever.com |
| Grievance Officer (India DPDPA) | Afzal Hussain — legal@zorever.com |
| Postal Address | Zorever EcomTech Private Limited, Ujala Nagar, Bareilly Road, Haldwani (Dist: Nainital) - 263139, Uttarakhand, India |
This Privacy Policy is effective as of April 9, 2026.