Privacy Policy for AI Blog Images by WPRaptor

Last updated: 2026-06-28

This Privacy Policy explains what the AI Blog Images by WPRaptor Shopify app ("the App", "we") collects, how it is used, and how it is protected.

What the App does

The App generates an AI image for a Shopify blog article and sets it as that article's featured image. Image generation runs through your own AI provider account (OpenAI, and Google Gemini on the Pro plan) using API keys you provide.

Information we store

For each store that installs the App we store, in our database:

• Shop domain (e.g. your-store.myshopify.com) and the Shopify session/access token required for the App to function.
• Your AI provider API keys, encrypted at rest with AES-256-GCM. Plaintext keys are never written to our database, never sent to the browser, and are decrypted in memory only at the moment a request is made to your AI provider.
• App settings (selected provider, model, style, size, output format, etc.).
• Generation job records (article ID, status, the text prompt used, the resulting image URL/ID, and any error message) so the App can show progress and history.

We do not collect or store your customers' personal data. The App does not read orders, customers, or payment information.

Information sent to third parties

When you generate an image, the App sends the text prompt (built from the article title/content and your settings) to the AI provider you selected:

• OpenAI: openai.com/policies/privacy-policy
• Google Gemini (Pro): policies.google.com/privacy

These requests use your own provider API key and are subject to that provider's terms and privacy policy. The generated image is uploaded to your Shopify store's files and attached to your article.

Billing

The Pro subscription is processed by Shopify through Shopify-managed App Pricing. We do not receive or store your payment-card details.

Data retention and deletion

• We retain shop data only while the App is installed.
• When you uninstall the App, or when Shopify sends a shop/redact request, we delete all data we hold for your shop (settings, encrypted keys, generation job records, and the session) automatically.
• The App stores no customer personal data, so customers/data_request and customers/redact requests return no customer information.

Security

• API keys are encrypted at rest (AES-256-GCM); the encryption key is held in a secrets manager / environment variable, never in the database or source control.
• All communication with Shopify and AI providers is over HTTPS.

Contact

Questions about this policy or your data: aiblogimages@gmail.com.