Green13 Product Personalizer — a Shopify app by Green13 srl. Version 1.3, last updated: 22 October 2026.
The merchant who installs the app is the data controller for their customers' data. Green13 srl processes that data on the merchant's behalf, only to provide the app, as a data processor, under our Data Processing Addendum (Article 28 GDPR), which applies to every merchant who installs the app. Contact: info@green13.agency.
Green13 Product Personalizer adds a personalizer to the product pages of a Shopify store, inside the store's own theme. Customers write a text, choose a font, a color or other options set up by the merchant, upload a photo or a file when the merchant offers it, and see a live preview of the product, view by view. When they add the product to the cart, the app saves their choices (the "design"), draws the preview images on its own server and adds links to the previews and to any uploaded file in the cart line. When the order is placed, the app makes the production files of each view and saves them, together with the files the customer uploaded, in the merchant's Shopify Files, where the merchant finds them from the order page.
When a customer pays with an express payment button that skips the store's cart (for example PayPal), the order line carries only the values the customer entered: when the order arrives, the app rebuilds the design from those values and the uploaded files linked in the line, and then works as for any other order. The merchant can also personalize an item of a draft order from the app, filling in the same options on the customer's behalf.
The app does not use artificial intelligence: previews and production files are drawn by the app's own code from the merchant's settings and the values the customer entered, and photos are never analysed to recognise people.
| Texts and choices | The texts a customer writes (which may include names, for example a name to print), the font, color and options they choose and values such as a date or a number. The app checks them again on its own server against the merchant's settings and draws the images from them. |
|---|---|
| Photos | When the merchant offers photo upload, the image the customer uploads and the crop they choose. The photo goes from the customer's browser straight to the app's server, which checks it and saves it again: location (GPS) and other metadata (EXIF, XMP, IPTC, color profiles) are removed and the image is reduced to at most 4,000 pixels per side. |
| Files | When the merchant offers file upload, the files the customer uploads (images, TIFF, PDF, EPS, PSD or ZIP, up to 20 MB each). Images and TIFF files are saved again without metadata, like photos. PDF, EPS, PSD and ZIP files are kept exactly as uploaded: any information stored inside them, such as an author name or the software used, stays in the file. |
| Language | The store language the customer was using, to show the personalizer in that language. |
The name a file has on the customer's device is never sent to the app. The app does not ask customers who they are. When a customer is logged in to the store, Shopify adds their customer ID to the requests the store sends to the app: the app does not use it and does not store it. When a customer uploads a photo or a file, their browser connects directly to the app's server, which sees their IP address like any website: the app uses it only in memory, to limit abuse, and does not store it.
| Orders | When an order is placed, Shopify sends it to the app. The app reads only the order ID, number and date and, for each order line, its ID, product, variant, quantity, title and properties (where the personalization is), to make the production files, to check the extra price of the personalization and to count the personalized orders of the merchant's billing cycle. When an order line has no design because the customer paid with an express payment button, the app rebuilds the design from the values in its properties. |
|---|---|
| Draft orders | Only when the merchant personalizes an item of a draft order from the app: the draft order's ID, name and status and, for each line, its ID, product, variant, quantity, title, price, discount and properties. The app writes the personalization and its extra price on the lines. The values are entered by the merchant's staff; the app never reads the draft order's customer, email address, addresses, phone number or note. |
| Customers' names, email addresses, addresses and phone numbers | Never read. The app does not request these fields from Shopify, so they are not available to it, and nothing about who placed an order is stored. |
The app also reads store data that is not about customers: products and variants, files, languages, sales channels, the cart validation and cart transform it installs, and the status of the merchant's subscription.
| Designs | For each personalized product added to a cart, rebuilt from an order paid with an express payment button or filled in by the merchant for a draft order: the texts and choices entered, references to the photos and files uploaded, the product and variant, the store language and the date; once it is ordered, the ID of the order and of the order line. A design is not linked to a customer. |
|---|---|
| Uploaded photos and files | On the app's server, each one with a smaller copy for the preview when it is a photo, and a record of its field, format, size and date (never its original name). Each file is reachable only through a link with a random identifier that cannot be guessed, which the app writes in the cart line and which stays in the order. Only photos in JPG or PNG format open in the browser; every other file is only downloaded. |
| Previews | The preview image of each view of a design, on the app's server. They are shown through a link with a random identifier that cannot be guessed, which the app writes in the cart line and which stays in the order. Once the app's own copies of an order are deleted (see below), the same link shows the production images from the merchant's Shopify Files. When the merchant turns on the print file option, the print image of each view is kept the same way. |
| Production files | For each view of an ordered design, an image and a vector file, saved in the merchant's Shopify Files with the photos and files the customer uploaded. Their names carry the order number, the line and the view or field, never anything about the customer. The app keeps its own copies on its server for 30 days after the files are saved in Shopify. |
| Personalized orders | Order ID, order number, date and the personalized lines of each order (line ID, product title, quantity, design and any problem), to count the orders of the merchant's plan and to show any problem to the merchant. |
| Store settings | Font, color and image sets, templates with their views and fields, the products they are assigned to, the extra price of a personalization and references to the merchant's files in Shopify Files. |
| Authentication session | The access token Shopify issues to keep the app installed. It holds no data about the merchant's customers. |
The app does not collect payment details, passwords, dates of birth or any special category of data, and IP addresses are not stored: limits against abuse are kept in memory only. It uses no analytics, advertising or tracking of any kind and sets no cookies. In the customer's browser the personalizer keeps only two technical values in the session storage of the open tab (the extra-price lines it has added to the cart and the time it last reloaded the cart page), which the browser deletes when the tab is closed.
| Storage | A database and the disk of the app's server, hosted by Aruba S.p.A. in Italy (European Union). Production files and the files customers upload are also saved in the merchant's Shopify Files, which are part of the merchant's store; Shopify serves them from its own network to anyone who has their link. |
|---|---|
| Security | All traffic to and from the app uses HTTPS. Requests from the store and from Shopify are verified with signatures. An upload needs a single-use permission, signed by the app and valid for 10 minutes, that the store's product page asks for through Shopify; the upload is recognised from its content, not from its name, and images are decoded and saved again by the app. The app never uses a preview or a price sent by the browser: it draws every preview and production file itself, from the merchant's settings, the values entered and the uploaded photos, and calculates every extra price. At rest, the texts and choices of every design are encrypted in the database (AES-256-GCM), and previews, uploaded photos and files and the copies of production files are encrypted on the server's disk: the key is kept in the app's production environment, apart from the database, the data folder and the backups. |
| Backups | Nightly backups of the database, encrypted before they leave the server. They are kept for 14 days on the app's server and an encrypted copy for 90 days on Green13's own server in Italy. Preview images, uploaded photos and files and production file copies are not in the backups. |
| Who can see it | The merchant's staff, in their Shopify admin, on the order page and in Shopify Files. The customer who personalized the product, through the preview and file links in their cart and order, and anyone the customer or the merchant shares those links with: the links cannot be guessed or listed, and search engines are asked not to index them. Green13 accesses the data only when needed to fix a problem. |
| Shared with third parties | No. Data is exchanged only with Shopify, through Shopify's own APIs, to read products and orders and to save the production files and uploaded files in the merchant's store. The hosting provider (Aruba S.p.A., Italy) is the only sub-processor. If the merchant turns on the print file option and connects a print-on-demand app, each order line also carries a link to the print image of the design (the customer's texts and photos, nothing about who the customer is): that app downloads the print file through the link in the order line, under the merchant's own agreement with it, and is not a sub-processor of ours. |
| Sold or used for advertising | Never. |
Green13 uses no other provider (no content delivery network, analytics or tracking service), and the data is not transferred outside the European Union. Shopify, which runs the merchant's store, forwards the store's requests to the app and keeps the merchant's Shopify Files, works for the merchant under the merchant's own agreement with it.
shop/redact).customers/redact). Production files and uploaded files already saved in the merchant's
Shopify Files are part of the merchant's store and are not deleted by the app: the merchant deletes them
in Shopify if the request covers them. Orders in the merchant's Shopify store are handled by
Shopify.
Customers exercise their rights (access, correction, erasure) by contacting the store. When the merchant
forwards a request through Shopify, the app compiles every design it holds for the orders listed in the
request, with the list of the files uploaded for them (customers/data_request); erasure
requests (customers/redact) are carried out automatically. Customers may also write to
info@green13.agency. In the EU you can lodge a complaint with
your data protection authority.
If the app starts to process new data, this page will be updated before that change is released, and the version and date above will change.
Green13 srl — Via della Resistenza 129/c, 20090 Buccinasco (MI), Italy
VAT IT14697160969 — REA MI 2801512 — info@green13.agency