Effective date: August 9, 2026
AltGuard ("the app", "we", "us") is a Shopify app that generates accessibility alt text for product images. This policy explains what data the app accesses, what it stores, who it is shared with, and how long it is kept.
AltGuard requests two Shopify access scopes:
read_products — to read product titles, product types, tags, and product image files, which are the inputs used to describe an image.write_files — to write generated alt text back onto your product media.We do not request access to orders, customers, or payment information, and the app cannot read them.
AltGuard stores the minimum needed to operate. Everything below is keyed to your shop domain:
| Data | Purpose |
|---|---|
| Shop domain and Shopify access token | Authenticating API calls on your behalf |
| Your app settings (tone, maximum length, language, brand name, quality model) | Generating alt text that matches your preferences |
| Monthly count of images processed | Enforcing your plan's monthly quota |
| Install date and app-review prompt timestamps | Deciding when, if ever, to show a review request |
We do not store your product images. Images are fetched, resized in memory, sent for description, and discarded. We do not store your customers' personal data — the app never has access to it.
To generate alt text, AltGuard sends the product image along with its title, product type, and tags to Google's Gemini API. Google processes this data to return a description.
Your product data is not used to train our models, and we do not use it for advertising or any purpose other than generating the alt text you requested. Google's handling of API data is governed by the Gemini API Terms of Service.
We share data with the following providers strictly to run the service:
| Provider | Role |
|---|---|
| Shopify | Platform, authentication, and billing |
| Google (Gemini API) | Generating image descriptions |
| Railway | Application hosting |
| Neon | Database hosting |
We do not sell your data, and we do not share it with anyone else.
When you uninstall AltGuard, Shopify sends us an app/uninstalled webhook and, roughly 48 hours later, a shop/redact webhook. On receiving these we delete your stored Shopify access token and session records, which revokes our ability to access your store.
We retain your monthly image-processing counts after uninstall. These records contain only your shop domain and a number — no personal data — and are kept so that uninstalling and reinstalling cannot be used to repeatedly reset the free plan's monthly quota.
Your app settings and review-prompt records are also currently retained after uninstall. These contain your shop domain and your chosen preferences (such as tone and brand name). If you would like these deleted, contact us using the details below and we will remove them.
AltGuard stores no personal data belonging to your customers. If we receive a Shopify customers/redact or customers/data_request webhook, we log the request for audit purposes and confirm that we hold no matching data.
AltGuard is operated from the United Kingdom. For the shop data described above we act as a data controller under the UK GDPR and the Data Protection Act 2018, and where applicable the EU GDPR.
You have the right to request access to the data we hold about you, to have it corrected or erased, to restrict or object to how we process it, and to receive a copy in a portable format. To exercise any of these rights, email admin@peerware.site. We will respond within one month, as required by law.
If you are unhappy with how we handle your request, you can complain to the UK Information Commissioner's Office at ico.org.uk.
All data is transmitted over encrypted connections (HTTPS/TLS). Shopify access tokens are stored in a managed Postgres database that is not publicly reachable. No system is perfectly secure, but we limit risk by requesting the narrowest useful set of permissions and storing as little as possible.
If we change this policy we will update the effective date above. Material changes affecting how we handle your data will also be communicated through the Shopify App Store listing.
For privacy questions, data deletion requests, or anything else, email admin@peerware.site. We aim to respond within two business days.