← Back to AltForge

AltForge — Privacy Policy

Last updated: March 16, 2026

1. Introduction

Hammer Forge Apps ("we," "us," or "our"), operated by Thrifties LLC, provides the AltForge Shopify application (the "App"). AltForge uses AI to generate alt text for product images. This Privacy Policy explains how we collect, use, and protect information when you use our App.

2. Information We Collect

2.1 Store Information

When you install AltForge, we collect:

  • Your Shopify store domain (e.g., yourstore.myshopify.com)
  • Store name and contact email
  • Product catalog data (product titles, descriptions, images, and variants) — used for alt text generation

2.2 Product Image Data

To generate alt text, your product image URLs are sent to OpenAI's API for analysis. We do not permanently store your images — they are processed in real time and only the generated alt text is retained.

2.3 Usage & Credit Data

We track:

  • Credit balances and purchase history (processed through Shopify's billing system)
  • Number of images processed and alt text generation history
  • App usage patterns for improving functionality

3. How We Use Your Information

  • To generate AI-powered alt text for your product images
  • To manage your credit balance and process purchases via Shopify's billing system
  • To provide customer support
  • To improve our App and develop new features

4. Third-Party Data Processing

We do not sell, rent, or trade your data to third parties.

We share data only with:

  • OpenAI — product image URLs are sent to OpenAI's API for alt text generation. OpenAI's API data is not used for training their models. See OpenAI's API data usage policy.
  • Supabase — our database provider (PostgreSQL hosted on AWS)
  • Shopify — as required for App functionality, authentication, and billing
  • Inngest — our background job processor for handling bulk image generation
  • Law enforcement — only when required by law

5. Data Storage & Security

Your data is stored securely in our database hosted on Supabase (PostgreSQL on AWS). We implement:

  • Encrypted connections (TLS/SSL) for all data transmission
  • Scoped access — each store can only access its own data
  • Shopify session token authentication for all requests

6. Customer Personal Data

AltForge does not access, store, or process any customer personal information from your Shopify store. We only request read_products and write_products permissions — we have no access to customer names, emails, addresses, orders, or any other customer data.

7. Data Retention & Deletion

We retain your data for as long as you have the App installed. When you uninstall AltForge:

  • We receive a webhook notification from Shopify
  • Your store data, generation history, credit records, and settings are permanently deleted within 48 hours
  • No data is retained after deletion

You may request data deletion at any time by contacting support@hammerforgeapps.com.

8. GDPR Compliance

For merchants in the European Economic Area:

  • We process data under the legal basis of contractual necessity and legitimate interest
  • You have the right to access, correct, or delete your data
  • You have the right to data portability
  • We respond to GDPR data subject access requests within 30 days

9. CCPA Compliance

For merchants in California:

  • We do not sell personal information
  • You have the right to know what data we collect and to request its deletion
  • Contact us to exercise your rights under the CCPA

10. Cookies

AltForge operates as an embedded Shopify app and does not set its own cookies on your storefront. Within the Shopify admin, standard Shopify session authentication is used.

11. Children's Privacy

AltForge is designed for business use by Shopify merchants. We do not knowingly collect information from children under 13.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify affected merchants via email for material changes.

13. Contact Us

For privacy-related questions or requests: