Privacy Policy

Last updated: September 20, 2026

Fillman ("Fillman", "we", "us") builds a Shopify app that turns product photos into Shopify listings, and helps you attach photos to products you already have. This page explains what data the app touches, why, and how you can ask us about it.

What the app accesses on your store

When you install Fillman, Shopify grants it the access scopes shown on the install screen — currently read_products andwrite_products. Fillman uses this only to:

• read your existing product catalog (title, handle, variant SKUs) to match uploaded photos against it;
• upload photos you provide and attach them to the product you confirm, via Shopify's own media APIs.

Fillman does not request access to your customers, orders, or any other data beyond products. It does not read or store customer personal information, and never will without a separate, explicit scope request and an update to this page.

Photos you upload

Photos you upload are processed in memory to match them to a product and are sent directly to Shopify's own file storage as part of that product's media. Fillman's own servers do not keep a permanent copy of your photos once the upload to Shopify completes.

What we store

We store the minimum needed to keep the app connected to your store:

• your shop's .myshopify.com domain;
• an access token issued by Shopify when you install the app, used to make the API calls above.

This is deleted automatically when you uninstall the app, and again (as a guaranteed final cleanup) when Shopify sends the mandatoryshop/redact webhook roughly 48 hours after uninstall.

Mandatory compliance webhooks

Fillman implements Shopify's three mandatory GDPR webhooks (customers/data_request, customers/redact,shop/redact). Because Fillman never stores customer personal data in the first place, the first two have nothing to return or delete; the third clears the shop's stored access token as described above.

The waitlist form on this site

If you sign up for the Fillman waitlist on this marketing site (not the Shopify app), we store the email address and store URL you provide, verified with Cloudflare Turnstile to filter spam, so we can contact you about early access. This is separate from anything the installed Shopify app does.

Third parties

Fillman's infrastructure runs on Shopify's own platform APIs. We do not sell or share your store or product data with third parties for advertising or any other purpose.

Your rights

You can request a copy of, or deletion of, any data Fillman holds about your shop by uninstalling the app (which removes your access token) or by emailing us atprivacy@fillman.app. Since Fillman does not store customer personal data, this mainly concerns the shop-level connection data described above.

Changes to this policy

If this policy changes, we'll update the date at the top of this page. Material changes will be announced on the app's listing page.

Contact

Questions about this policy or your data:privacy@fillman.app.