# Privacy Policy — Bulk Product Image Manager

**Last updated:** May 26, 2026

## 1. Data controller

This Shopify (“Bulk Product Image Manager,” hereinafter referred to a
, “the App”) is published by:

WEST WEB AGENCY
150 Allée de l’Airial, 40150 Angresse
Company registration: 84248987400011
Contact: contact@west-web-agency.fr

## 2. Data processed

The App processes Shopify data only**. It does not access
any **end-customer data** (the store’s own customers, orders, or
payments).

When in use, the app reads and writes the following data via
the Shopify API:

– Product catalog (titles, handles, descriptions, types, vendors, tags)
– Variants (SKUs, variant options)
– Product images and their ALT tags
– Product and variant metafields
– Collections and product memberships

The app stores the following data on its own servers:

– Shopify (encrypted access token, shop identifier)
– Subscription status (current plan, status, key dates, Shopify
Shopify identifier)
– Monthly upload count per shop (number of images uploaded)
– A technical language-preference cookie (`locale`)

## 3. Purposes

This data is processed for the following purposes:

– Providing the app’s features (bulk image upload, ALT tag editing,
catalog audit)
– Managing paid subscriptions and enforcing monthly quotas
– Authenticating requests from the Shopify interface

## 4. Legal basis

Processing is based on the **performance of the contract** between
WEST WEB AGENCY and the merchant who installs the App (GDPR Article
6.1.b).

## 5. Recipients

Data is not shared with any third party except for the technical sub-processors
that are strictly necessary for the operation of the App:

–Shopify .** — intermediary for the Admin API and webhooks
– OVH — hosting provider for the App

No data is sold, monetized, or shared with marketing partners.

## 6. International transfers

Data may pass through Shopify , which is hosted par
, some of which are located outside the European Union. Shopify GDPR-compliant
contractual safeguards for these transfers (standard contractual
clauses).

## 7. Retention

– **Active session**: for the entire duration of the App’s
installation on the store
– **Subscription and counter data**: for the entire installation period
– **After uninstallation**: Shopify a `shop/redact` webhook
48 hours after final uninstallation. The App then **irreversibly deletes**
all shop data (session, subscription, counters).

## 8. Merchant Rights

In accordance with Articles 15 through 22 of the GDPR, merchants have the right to request that the following information be provided:

– Right of access to their data
– Right to rectification
– Right to erasure (“right to be forgotten”) — uninstalling the App
triggers automatic erasure within 48 hours
– Right to restriction of processing
– Right to object
– Right to data portability

You may exercise these rights by writing to contact@west-web-agency.fr.

## 9. Complaint

Merchants may file a complaint with the French Data Protection Authority (CNIL—Commission Nationale de l’Informatique et des
Libertés, 3 place de Fontenoy, 75007 Paris, France, www.cnil.fr)
if they believe that the processing of their data does not comply
with regulations.

## 10. Cookies

The app sets only one technical cookie named `locale`, which stores
the merchant’s preferred interface language (French or English).
This cookie is strictly necessary for the app to function and is not used for
tracking purposes.

## 11. Security

Data is stored on secure servers. Shopify tokens are encrypted at rest using the
protocol. Communications with the Shopify and the
merchant’s browser use HTTPS exclusively.

## 12. Policy Changes

This policy may be updated to reflect legal or operational changes.
The date of the last update appears at the top of the document. Merchants
are encouraged to review it periodically.

## 13. Contact

For any questions regarding this policy or the processing of your
data: contact@west-web-agency.fr