Privacy Policy

for the Showio - Catalog & Line Sheet Shopify app
Last updated: 7 November 2026

This privacy policy explains how the Shopify app Showio - Catalog & Line Sheet ("the App"), operated by EpicPilot Labs ("we", "us"), handles information when you install and use it on your Shopify store, and when someone opens a catalog you share through the App.

In short: the App reads your products, their translations, your store's languages and a few facts about your markets to make PDF line sheets, catalogs and price lists. It never reads your customers' data or your orders, and it changes nothing in your store. It keeps a copy of your product data, your catalogs' settings and the PDFs it makes, and deletes all of it about 48 hours after you uninstall. On the Free plan, PDFs are deleted after 60 days without use by you or your buyers; your catalogs, their settings and their share links stay. Everything is stored in the European Union.

1. Who we are

The App is provided by Marius Šiupšinskas, a natural person carrying out individual activity (individuali veikla) registered in Lithuania (European Union), trading as EpicPilot Labs. EpicPilot Labs is a trading name, not a separate company. Marius Šiupšinskas is the data controller for the information described in this policy, with one exception: for personal data you put into your catalogs, for example a sales contact's name and phone number in the contact block, you are the controller and we process it on your behalf, only to build and serve your catalogs, under section 6a of our terms of service.

For any question or request about this policy or your data, contact showio@epicpilotlabs.com. We aim to reply within two business days.

2. What the App reads from your store

When you install the App, Shopify asks you to grant it four permissions, all of them read-only: your products (read_products), the translations of your store's content (read_translations), your store's languages (read_locales) and your markets (read_markets). The App asks for nothing else. With these permissions, it reads:

Your active products: each product's title, handle, description (its first 500 characters), vendor, product type, status and its address on your online store; its photos and other media (their addresses, sizes and alt text, and for a video or 3D model only its preview image); and each variant's title, options, SKU, barcode, price and compare-at price. To mark sold-out variants, it also reads whether stock is tracked, each variant's stock count and whether the variant can still be sold when out of stock. It keeps only the result: available, sold out or on backorder. Draft and archived products are not kept.
Your collections: each collection's title, handle, sort order and which products it holds, in that order.
Your translations and languages: the languages your store has and which of them it publishes, and the translations saved in Shopify for your products' titles, descriptions (their first 500 characters), option names, option values and web addresses (handles), and for your collections' titles, so a catalog in another language can print them. The App keeps no other translated content.
Two facts about your markets: your online store's web address for each language (for example yourstore.com/pl for Polish), so the QR codes and product links in a catalog open each product's page in the catalog's language; and whether a market is one for company locations, so the App can tell which of your catalogs are B2B catalogs (on Shopify plans other than Plus, B2B catalogs are assigned through a market). The App reads nothing else about your markets: not their names, countries, currencies or prices.
Your Shopify B2B catalogs: each B2B catalog's name, and its price list's name, currency, prices and quantity rules (minimum, maximum and the multiple to order in), so you can choose one as the source of your wholesale prices. The App never reads the companies themselves, their locations or their contacts.
Your store's details: its name, myshopify.com address, Shopify's ID for it, its currency and how it writes prices, its time zone, its main domain, whether your prices include tax, the country of its address, whether it is a Shopify development store, the contact email it publishes and the store owner's email address.

The App fetches your product photos from Shopify's image service in the sizes a PDF needs, never the original files.

What the App does not read or change

The App has no access to your customers, your orders or your B2B companies. It reads nothing about your inventory beyond the stock facts above, and it cannot change anything in your store. It doesn't ask Shopify for any protected customer data.

3. What the App stores

To make and update your PDFs, the App keeps the following. Some of it you enter yourself; the rest comes from Shopify.

What	Why
A copy of the product data, translations, languages and web addresses in section 2	To build your PDFs and to see which catalogs changed since their last build. Refreshed from Shopify every night while you have at least one catalog, and when you rebuild a catalog.
Your catalogs' settings: title, internal name, subtitle, which products or collections, template, paper size, how photos are placed, which details to print, how wholesale prices are worked out, the minimum quantity and case pack, whether the PDF states VAT, how out-of-stock variants are shown, the language, the cover's contact block and ordering terms; and the printed labels you change, saved for each language	To build each catalog the way you set it up. A new catalog's contact block starts with your store's name, its published contact email and its main domain; whatever you write there is printed on the cover and shown on the catalog's share page.
Your logo (stored as a resized copy) and brand color, from Settings	Printed on every catalog and shown on its share page.
The PDFs the App makes, the smaller email-size versions on the plans that include them, and a small picture of each PDF's cover	So you, and the people you share a catalog with, can download them, and so the App and the share page can show the cover.
Resized copies of your product photos	So a rebuild doesn't fetch every photo again.
Each catalog's build status: when it was built, how far a build has got, and an error code if it failed	To show you each catalog's status and fix problems.
Share links: each link's random code (stored as a hash, plus an encrypted copy so the App can show it to you), its catalog, when it was made or replaced, and when someone last downloaded through it (when, never who)	So a share link opens the right catalog and stops working when you make a new one or turn it off; so a replaced link can show your contact for 30 days (section 7); and so a download through it counts as use for the 60 days on the Free plan (section 9).
When the App asked Shopify to show you the App Store review form, how many PDF downloads and share-link copies came before, and Shopify's answer (for example that the form was shown, or that you have already reviewed the App). Never your rating or review: Shopify keeps those	So the App asks no more often than Shopify allows, at most twice ever, and never again once you have reviewed it.
Your plan: the plan you're on, its status, billing dates and free trial as Shopify reports them, Shopify's identifier for your subscription, and Shopify's record of your store's plan changes and free trials with the App over the past year	To apply your plan's limits and features and show them in the App, and to offer a free trial only where Shopify gives one. Payment details stay with Shopify; the App never sees them.
Shopify session data, including the access token Shopify gives the App	So the App can read your products. The token is stored encrypted.
Your store's details from section 2, the dates you installed and uninstalled the App, and when you last used it	To show dates in your time zone and prices in your currency, to fill in your first catalog, to look up your plan with Shopify, to count the 60 days on the Free plan (section 9), and to email you about the App (section 5). Use is recorded at most once an hour.
Records of the App's background work (builds and nightly refreshes: when they ran, their result and an error code)	To run the work in order and retry it after a failure. Deleted 30 days after the work finished.
Technical logs: the time, the page or file asked for (with share-link codes and other secrets removed), your store's myshopify.com address, and error messages with tokens, email addresses and phone numbers removed. No IP addresses	To find and fix faults. Kept by our hosting provider for 30 days.
Support messages	If you write to us, by email or through "Get support" in your Shopify admin (which Shopify sends to us by email), we receive your address, your store and your message, so we can reply. They are kept in our support inbox, not in the App, for as long as section 9 says. Please don't send us your customers' personal data.

When you change a catalog, its PDFs and its share page show the change after the next complete build.

The live preview in the catalog form draws pictures of your catalog from the data above while you edit; nothing it draws is stored.

Notifications to the App's operator

So that problems can be spotted and fixed quickly, the App also sends short messages to the operator's own Telegram chat. They name your store by its myshopify.com address, and for plan changes also by its name. They cover: installs and uninstalls, with the reason and details you gave Shopify when uninstalling, if any; changes to a paid plan (the plan and its price); the App losing access to your store; server errors and failed builds (the time, the part of the App affected and the error message, with tokens and email addresses removed); and a daily summary of the stores that installed, uninstalled or opened the App in the past week, with counts of plans and revenue. They never contain your product data, your PDFs or anything about your customers.

All of this relates to you and your store, not to your customers.

4. Your customers' data

The App holds none. It doesn't ask Shopify for access to customers or orders, and it can't read them. If you write personal data into your products (for example a designer's name in a description) or into a catalog's contact block (for example a sales contact's name and phone number), the App prints it as you wrote it, in your PDFs and on your share pages. For that data you are the controller and we are your processor (section 1).

5. How your information is used

We use the information described above only to:

build your PDFs, keep them up to date with your store, and let you and the people you share them with download them;
remember your catalogs and settings between visits;
apply your plan's limits and features, and show your plan in the App;
respond to your support requests;
email you about the App: changes to the App's plans, their limits or our terms of service, a fault affecting your catalogs, discontinuation of the App, and anything else about your store's plan or account. We send no marketing email, never use your email address for other products and never share it;
understand which channels bring merchants to the App, and which of them bring stores that stay active and choose a paid plan, using the App Store listing analytics described in section 7b;
diagnose technical errors and keep the App running reliably;
ask you, through Shopify's own review form, to review the App on the Shopify App Store, no more often than Shopify allows.

We do not sell, rent or share your information for advertising or marketing. We do not use it for automated decision-making or profiling.

6. Legal bases

Where the GDPR applies, we rely on these legal bases:

Contract (Art. 6(1)(b) GDPR): providing the App and its plans under our terms of service: building and storing your PDFs, keeping your settings, serving your share links, applying your plan, answering your support requests and sending the emails described in section 5.
Legitimate interests (Art. 6(1)(f) GDPR): keeping the App secure, for example by checking that notifications really come from Shopify and by limiting how often a share link can be used; diagnosing errors and keeping the service reliable, including the technical logs and operator notifications in section 3; using an AI assistant to build the App and to help draft replies to support requests (section 8); asking for a review of the App through Shopify's own review form; understanding which channels bring merchants to the App, and which of them bring stores that stay active and choose a paid plan, using the App Store listing analytics described in section 7b; and counting page views on our websites without cookies (section 7a).
Legal obligation (Art. 6(1)(c) GDPR): responding to data protection requests and meeting other legal requirements that apply to us.

Where we rely on legitimate interests, you can object at any time (section 11).

7. Share links and the people who open them

Each catalog has its own share link. On the paid plans every link can be on; on the Free plan, one at a time. Anyone who has the link can open its page and download the catalog's PDFs, wholesale prices included, without signing in. The page shows your store's name or logo, the catalog's cover and title, its contact block and its downloads; on the Free plan it also shows a small "Made with Showio" line. You choose who gets the link.

A share link stops working for good when you turn it off, make a new link for that catalog, or delete the catalog. When you make a new link, the old one shows your store's name or logo and the catalog's contact email for 30 days, so buyers who still have it can ask you for the new one. After that, or as soon as you make another new link, it shows a page saying it isn't available. On the Free plan, one link is on at a time. Turning on another catalog's link pauses the first one. If you move to the Free plan with several links, one stays on: the one your buyers used most recently, among the catalogs within the Free plan's limit. The others pause. If you uninstall the App, your links pause at once. A paused link opens a page saying it isn't available. It works again when you switch back to it on the Free plan, return to a paid plan, or reinstall before your data is erased (section 9). A share link never serves a build with missing photos; it keeps serving the last complete one.

The App doesn't record who opens a share link; it keeps only the time of the last download through it, which counts as use for the Free plan's 60 days (section 9). It sets no cookies on the share page, loads no third-party scripts, fonts or trackers there, asks search engines not to index it, and keeps share-link addresses out of its logs and error reports. To deliver the page and the files, our hosting providers (Fly.io and Cloudflare, section 8) process the visitor's IP address and browser details. To slow down abuse, the App counts requests per IP address for up to ten minutes and discards the counts within a minute after that. The counts are held only in the server's memory, never saved to its database, files or logs. Downloads go through links that expire after five minutes.

The "Made with Showio" line on PDFs made on the Free plan, and on a Free store's share page, links to our website (section 7a).

7a. Our websites

This policy covers the App. Our websites (epicpilotlabs.com) use Cloudflare Web Analytics to count page views. It sets no cookies, does not fingerprint visitors, and does not track anyone across sites. Nothing on our websites asks you for personal data.

7b. Our Shopify App Store listing

When you visit the App's listing on the Shopify App Store, Shopify sends us analytics about the visit through Google Analytics 4: the pages viewed, how you reached the listing (for example an App Store search and its search term, a category, the App Store's home page, an App Store ad, or the site that referred you), the language you use the App Store in, and whether you clicked Install or Open. Google Analytics also records your browser, your type of device and your approximate location, which it works out from your IP address without storing the address. When a store installs the App, Shopify also sends us an install event with the store's Shopify ID, store name and myshopify.com address.

We use this only to understand which channels bring merchants to the App. We may link an install event to the store's account in the App, to see which channels bring stores that stay active and choose a paid plan. We do not use it for advertising.

Cookies on the Shopify App Store are set and managed by Shopify under Shopify's privacy policy, and you manage your cookie choices there. Google processes this data on our behalf. Google Analytics deletes the records of each visit and install automatically after 14 months. Its summary reports, which show totals (for example visits per search term, or installs per day), are not affected by that limit and are kept until we delete them.

8. Where your information is stored, and our service providers

The App runs on servers in Frankfurt, Germany (European Union). Its database is hosted with Neon in the European Union (Frankfurt, AWS eu-central-1), and its PDFs, photo copies, cover pictures and your logo are stored with Cloudflare R2 in the European Union (R2's EU jurisdiction). Data is encrypted in transit (HTTPS/TLS) and at rest by our hosting providers. Fly.io, Neon and Cloudflare are US companies; they store this data in the EU. Where Fly.io, Neon or Cloudflare process data outside the EU, the transfer is covered by their data processing agreements, using the EU-US Data Privacy Framework and/or the European Commission's standard contractual clauses.

We rely on the following providers. Each processes only what is necessary for its function:

Fly.io: application hosting (Frankfurt, EU): the App's pages, its share pages, the machine that builds your PDFs, and the technical logs in section 3.
Neon: database hosting (Frankfurt, EU): everything in section 3 except the files (PDFs, photo copies, cover pictures, logo) and support messages.
Cloudflare: storage of your PDFs, photo copies, cover pictures and logo (R2, EU jurisdiction); delivery of PDF downloads; a scheduler that calls the App on a timer; and, for our websites, hosting, cookieless page view analytics and forwarding of email sent to showio@epicpilotlabs.com to our support inbox.
Shopify: the platform the App is installed on, which provides your product data and bills your plan.
Telegram: delivery of the operator notifications described in section 3.
Google (Gmail): our support inbox, where emails to showio@epicpilotlabs.com are read and answered.
Google Analytics (Google Ireland Limited): analytics for the App's Shopify App Store listing, as described in section 7b.
Anthropic (Claude): an AI assistant we use to build the App and to help draft replies to support requests. When a task needs it, we may share information about your store with it: its myshopify.com address, your catalogs' settings and build status, error codes, and your support messages. Anthropic handles this information under its own terms and privacy policy.

Google may process data outside the European Union; where it does, it relies on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. Telegram, which delivers our operator notifications, may also process data outside the European Union, under its own terms. Anthropic may process the information we share with it outside the European Union, relying on adequacy decisions of the European Commission, standard contractual clauses or other grounds that data protection law allows.

The App sends no automated email; if it ever does, the provider that sends it will be added here first.

9. How long we keep information

Product data, translations and web addresses: kept while the App is installed, and replaced by each refresh. A product you delete, or set to draft or archived, is removed from the App's copy at the next refresh. Translations are read only for the languages your catalogs print in; a language's translations are deleted at the next refresh after no catalog prints in it or you unpublish it in Shopify. While you have no catalog, nothing is refreshed: the copy stays as last read until you make a catalog, uninstall, or ask us to delete it (section 10).
Photo copies: a photo you delete or replace in Shopify, or whose product you delete, set to draft or archive, is deleted at the next nightly refresh. All of them are deleted when you delete your last catalog, and at erasure.
Catalogs and their settings, your logo and brand color: kept until you delete them or your store's data is erased (below). The App never deletes a catalog by itself, on any plan. A logo you replace is deleted at once.
The labels you change (saved for each language): kept until you change them back or your store's data is erased.
PDFs on the Pro and Business plans: each catalog's latest PDFs are kept as long as the catalog. A rebuild replaces them, and the previous files are deleted 10 minutes later. While the newest build is missing photos, the last complete one is kept so your share link can serve it.
PDFs on the Free plan: while your store is on the Free plan, its PDFs and photo copies are deleted after 60 days without use. Use means you opening the App, rebuilding a catalog or downloading one, or someone downloading a catalog through your share link, so while your buyers download from your link, your PDFs stay. Your catalogs, their settings and their share links stay, and Rebuild now makes the PDF again for any catalog within your plan's limit. A catalog past the limit, for example after moving to the Free plan with more catalogs than it includes, can't be rebuilt until you are within your plan's limit again. Shopify development stores, which are for testing, are not affected.
Deleting a catalog: deletes its settings, its PDFs, its cover pictures and its share link.
After you uninstall: your Shopify session and access token are deleted at once, so the App can no longer read your store, and your share links pause (section 7). Everything else is kept for about 48 hours, so that reinstalling within that time brings your catalogs back. Shopify then sends the request to erase your store's data, and everything the App holds about your store is deleted: product data, translations and web addresses, catalogs and settings, the labels you changed, PDFs, photo copies, cover pictures, logo, share links, plan records, review request records, build records and store details. If you install the App again before the erasure, your data is kept. Nothing about your store stays in the App's database or file storage after the erasure; the technical logs, operator notifications and backups below are deleted on their own schedule.
Backups: our database provider keeps a short history for recovery; deleted data leaves it within 7 days. PDFs and photo copies have no backups: once deleted, they are gone.
Build records: deleted 30 days after the work finished.
Technical logs: kept by Fly.io for 30 days, then deleted.
Review requests: kept until your store's data is erased, so the App never asks more than Shopify allows.
Operator notifications: deleted automatically from the operator's Telegram chat after one month.
Support messages: kept until 2 years after your last email to us, then deleted automatically, unless the law requires us to keep a particular email longer, for example because it is an invoice. If you send us your customers' personal data, for example in a screenshot, we use it only to answer your request, and keep and delete it together with the support conversation it is in.
App Store listing analytics (section 7b): Google Analytics deletes the records of each visit and install automatically after 14 months; its summary reports are kept until we delete them. Shopify's request to erase your store's data does not reach Google Analytics, so it doesn't remove them.

10. Data protection requests

The App supports Shopify's mandatory privacy webhooks:

customers/data_request: the App holds no customers' personal data, so there is nothing to provide.
customers/redact: the App holds no customers' personal data, so there is nothing to delete.
shop/redact: all data for your store in the App's own systems is deleted, its files included, as described in section 9.

If you would like a copy of the data we hold about your store, or want it deleted from the App's systems before you uninstall, email showio@epicpilotlabs.com and we will do it.

11. Your rights

Depending on where you are (for example under the GDPR in the EU/EEA or the UK, or the CCPA in California), you may have rights to access, correct, delete or export the personal data we hold about you, and to object to or restrict its processing. Since the data we hold relates to your store, you can exercise most of these rights directly in the App: edit or delete your catalogs, change your contact block, logo and settings, or make a new share link or turn one off. Uninstalling the App deletes your data, as described in section 9. For anything else, contact showio@epicpilotlabs.com.

If you are in the EU/EEA and believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection authority, or with Lithuania's State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija).

12. Security

The access token Shopify gives the App is stored encrypted. Your PDFs, photo copies, cover pictures and logo are kept in a private storage bucket under a random folder name, never your store's address; the App hands out downloads through links that expire after five minutes. A share link's address contains a long random code that can't be guessed. The App stores the code as a hash, plus an encrypted copy so the App can show you the link again. You can replace a link with a new one, or turn it off, at any time. All connections between Shopify, the App and our providers use encrypted HTTPS/TLS. Notifications from Shopify are checked cryptographically before the App acts on them. Access to our production systems is restricted to the App's operator.

Anyone who has one of your share links can open it, so send it only to the people it's meant for.

13. Children

The App is a business tool for Shopify merchants and is not directed at children.

14. Changes to this policy

We may update this policy as the App changes or as legal requirements change. This policy forms part of our terms of service, so, as section 12 of the terms says, we will give at least 30 days' notice, in the App or by email, before a change that affects your rights takes effect. Other changes, such as corrections and clarifications, apply from the "Last updated" date at the top.

15. Contact

Questions, requests or concerns about privacy:

Marius Šiupšinskas, trading as EpicPilot Labs
Individual activity (individuali veikla) registered in Lithuania
Lithuania, European Union
Email: showio@epicpilotlabs.com

EpicPilot Labs is the trading name of Marius Šiupšinskas, not a separate company.