Privacy Policy — MerchReel

Last updated: June 14, 2026

MerchReel ("we", "our", or "us") operates the MerchReel Shopify application available at merchreel.chriscastle.com. This Privacy Policy explains what information we collect when you install and use MerchReel, how we use it, and your rights regarding that information.

1. Information We Collect

From Shopify

When you install MerchReel from the Shopify App Store, we receive and store:

Your shop domain (e.g., yourstore.myshopify.com)
A Shopify API access token that allows us to read your product catalog
Product data you authorize us to access: product titles, descriptions, prices, and product images
Your Shopify billing plan information (to manage your MerchReel subscription tier)

Brand Kit and Settings

When you configure MerchReel, we store your brand preferences including your chosen AI avatar, logo URL, caption style, and color preferences.

Video Jobs

We store a record of each video generation request, including the product data at the time of the request (a snapshot), the generated script, the render status, and the output video URLs. We do not permanently store the raw MP4 files on our servers — videos are generated and made available for download or embedding.

Usage Data

We track the number of videos generated per billing cycle to enforce your plan limits and report usage to Shopify Billing.

2. How We Use Your Information

To generate videos: Product titles, descriptions, prices, and images are sent to OpenAI (script generation) and HeyGen (avatar video rendering) to produce your videos.
To deliver the service: We use your Shopify access token to read product data and write video embed blocks to your theme where enabled.
To manage billing: We report usage records to Shopify Billing to charge your account according to your plan.
To improve MerchReel: Aggregated, anonymized usage patterns help us understand which features are used most and improve the product.

3. Third-Party Services

MerchReel relies on the following third-party processors to deliver the service. By using MerchReel, you acknowledge that your product data passes through these services:

OpenAI — generates promotional scripts from your product titles and descriptions. Governed by the OpenAI Privacy Policy.
HeyGen — renders AI avatar videos from the generated scripts. Governed by the HeyGen Privacy Policy.
Shopify — our app is distributed through the Shopify platform and billing is handled through Shopify Billing. Governed by the Shopify Privacy Policy.

We do not sell your data to any third party. Product data is transmitted to OpenAI and HeyGen solely to produce videos you have explicitly requested.

4. Data Retention

We retain your shop data and video job records for as long as your MerchReel account is active. When you uninstall MerchReel, we initiate deletion of your store's access token and personal data within 30 days in compliance with Shopify's GDPR webhook requirements.

You may request immediate deletion of your data by emailing [email protected].

5. Shopify GDPR Compliance

MerchReel implements the three mandatory Shopify GDPR webhooks:

customers/data_request — we provide any stored customer data associated with your shop upon request.
customers/redact — we delete customer-identifying data from our systems upon receipt.
shop/redact — we fully delete all data associated with your shop upon uninstallation and receipt of this webhook.

6. Data Security

We store Shopify access tokens and API credentials in an encrypted database on a secured server. Access to production systems is restricted to authorized personnel. We use HTTPS for all data transmission. No system is perfectly secure, and we cannot guarantee absolute security, but we take reasonable measures to protect your information.

7. Your Rights

Depending on your location, you may have rights including the right to access, correct, or delete your personal data. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Children's Privacy

MerchReel is a business-to-business service intended for Shopify merchants. We do not knowingly collect information from anyone under 18 years of age.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of MerchReel after changes are posted constitutes your acceptance of the revised policy.

10. Contact

Questions about this policy? Contact us at:
[email protected]
merchreel.chriscastle.com