Last updated October 12, 2026

Privacy policy

Vistolist helps Shopify merchants create product images, listing content, and Shopify draft products. This policy explains the data used to provide that service.

Data we process

• Your Shopify store domain, installation status, authorized scopes, and encrypted Shopify access token.
• Product photographs, merchant-entered product facts, generated images and content, SKUs, and Shopify product references.
• Operational records such as generation counts, errors, and timestamps needed to run and secure the service.

How data is used

We use this data only to authenticate your store, generate the content you request, create or update Shopify drafts, provide downloads, prevent duplicates, meter usage, and maintain service security. The app does not read or retain Shopify customer records.

Service providers

Product photographs and relevant product facts may be sent to OpenAI to generate and evaluate requested images and listing content. Hosting and storage providers process encrypted or access-controlled application data on our behalf. We do not sell merchant or customer data.

Security and retention

Shopify tokens are encrypted at rest. Each installed store has an isolated product data area. Data is kept while the app is installed or as needed to provide the service, then removed following uninstall and Shopify privacy-redaction requirements, subject to limited legal or security obligations.

Your choices

You may delete local products inside the app without deleting the corresponding Shopify draft. Uninstalling the app revokes access. Shopify privacy requests are handled through the mandatory compliance webhooks.

Contact

Questions or deletion requests can be sent through our support page.