Printline Personalizer lets a merchant offer personalised products: the shopper types a short text, sees it on the product, and it travels with the order as a printable file.

This policy describes what the app itself handles. It is not the shop's own privacy policy.

What the app accesses

The app asks the merchant's store for a single permission: write_products. It uses it to read the products in the store and to store its own configuration on them.

The app never requests access to customers, orders, checkouts or payments, and holds no permission that would allow it.

What the app stores

On the merchant's own store, as metafields:

• which products are personalisable, which styles they offer, the input field's label and limits
• the merchant's material profiles: the photo of the blank product, the printable area in millimetres, and where that area sits on the photo

On the app's own server, one row per design a shopper creates:

• the shop's domain
• the product and variant the design belongs to
• the recipe: the text the shopper typed, and the style they chose
• a copy of the material's measurements as they were at that moment
• the version of the layout engine used
• timestamps

About the text a shopper types

This is the only personal data the app holds, and it is treated as personal data because it usually is one: people personalise things with names.

The row it sits in contains no customer identifier — no customer id, no name field, no email address, no IP address, no order number. The app cannot tell which shopper a design belongs to, and does not try to. That is deliberate: it is why the app needs no access to customer records at all.

The practical consequence, stated plainly: if a shopper asks the merchant to delete their data, this app has nothing it can match them against. Deletion is handled by time and by shop instead — see below.

What the app does not store

No images. Previews and print files are produced from the recipe at the moment they are requested, and are not kept. No customer accounts, no email addresses, no IP addresses, no payment data, no tracking or analytics of shoppers.

Where the data is stored

On servers in Frankfurt, Germany (EU). The database is hosted by Neon, the application by Fly.io.

How long the data is kept

• A design that has not been linked to an order: 30 days, then deleted automatically.
• A design known to belong to an order: 180 days, then deleted automatically.
• Everything belonging to a shop is deleted when the app is uninstalled and Shopify sends the corresponding request.

Sharing

Nothing is sold, rented or passed on for advertising. Data is processed only by the two hosting providers named above, acting on instructions.

Your rights

Merchants and shoppers in the EU/EEA have the rights granted by the GDPR: access, rectification, erasure, restriction, portability and objection. Requests go to info@satorisoul.de and are answered within 30 days.

Where a request concerns the text a shopper typed, please include the design code shown on the order line (for example PL-7K2Q-D9M4). Without it the app has no way to find the entry, for the reason described above.

Changes

Material changes to this policy are published on this page with a new date.

Last updated: 22 August 2026