GP Translate
GP Translate
AI TRANSLATE & CURRENCY
SECTION 01

1. Overview & Scope

PGS TECH LIMITED ("Company", "we", "us", or "our") operates the GP Translate application for Shopify merchants. We are committed to protecting the privacy, security, and integrity of the personal data of our merchants and their storefront end-users.

This Privacy Policy explains how GP Translate collects, handles, stores, and protects information when you install and use our Shopify application and related services. By installing GP Translate, you agree to the practices described in this policy.

SECTION 02

2. Data We Collect

GP Translate operates under the principle of data minimization. We only collect the minimal information necessary to deliver multilingual store translation and currency switching:

  • Merchant Account Information: Shopify store domain (.myshopify.com), primary language, contact email, and active plan metadata provided via Shopify OAuth.
  • Store Content for Translation: Product titles, descriptions, collection handles, page content, blog posts, theme text, and navigation menus requested for translation via Shopify GraphQL Admin APIs.
  • Storefront Visitor Technical Data: Anonymized IP addresses used strictly in-memory for geolocation detection to recommend appropriate regional languages and currencies. We do NOT track individual shopper identities or sell visitor browsing data.
SECTION 03

3. How We Use Data

We use collected data solely for the following operational purposes:

  • To synchronize and publish translated content back to your Shopify store via official Shopify Multilingual APIs.
  • To display localized prices and currencies based on real-time foreign exchange rate feeds.
  • To provide customer support and troubleshoot translation formatting or theme switcher compatibility.
  • To ensure compliance with Shopify App Store Partner requirements and platform security standards.
SECTION 04

4. BYOK & AI Provider Privacy

GP Translate implements a Bring-Your-Own-Key (BYOK) architecture for AI translation engines (such as OpenAI, Google Gemini, and DeepSeek):

  • API Key Storage: Merchant API keys are encrypted at rest using industry-standard AES-256 encryption. Your keys are never exposed to other merchants or third parties.
  • Zero Training on Merchant Data: API requests made using enterprise BYOK keys are subject to the AI providers' enterprise terms, which guarantee that input prompts and translated strings are NOT used for training AI models.
  • Direct Execution: Translation payloads travel directly between our secure proxy infrastructure and the merchant's chosen AI provider.
SECTION 05

5. Data Retention & Security

We implement comprehensive technical and organizational measures to safeguard merchant information against unauthorized access, loss, or alteration. All communication is encrypted in transit using TLS 1.3.

When a merchant uninstalls GP Translate from their Shopify store, we immediately receive the Shopify app/uninstalled webhook and permanently purge stored cache, API keys, and configuration data within 48 hours.

SECTION 06

6. GDPR & CCPA Compliance

We fully respect the privacy rights granted to individuals under the European General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA):

  • Right to Access & Portability: You may request a copy of the metadata we hold regarding your store.
  • Right to Erasure (Shopify Redact Webhooks): We strictly adhere to Shopify's mandatory privacy webhooks (customers/data_request, customers/redact, and shop/redact) to process deletion requests within mandatory timelines.
  • No Sale of Personal Data: We never sell, rent, or monetize personal information.
SECTION 07

7. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact our Data Protection Officer: