Last updated: May 2026
## Overview
GenFlik is an AI-powered video creation tool that helps Shopify merchants and creators generate talking-avatar marketing videos. This Privacy Policy explains what data we collect from you and the Shopify storefronts you connect, why we collect it, and how we handle it. It applies to the GenFlik web app at genflik.com, the GenFlik mobile app, and the GenFlik Shopify App.
**Account information:** - Email address and name (via Clerk authentication) - Account preferences such as selected voice, language, and default ad length - Credit balance and transaction history - Generated videos and the scripts used to create them
**Shopify App installation data:** - Your Shopify store domain - The OAuth access token issued by Shopify, used only to call the Shopify Admin API on your behalf - The Shopify user ID that performed the install
**Payment information:** - Payment details are processed by Stripe (web and mobile), Apple or Google (mobile in-app purchases), or Shopify Billing (Shopify App Store installs) - We do not store full credit card numbers
When you generate an ad for a specific product, we read the following from your store via the Shopify Admin API: - Product titles, descriptions, prices, and images - Product reviews when Judge.me or Shopify's native review system is enabled, used to inform the ad script - Order counts per product over the last 7 and 30 days as aggregated counts only, used to populate the Best Sellers suggestion list
**We do NOT collect:** - Customer names, emails, addresses, or phone numbers - Order contents, line items, or payment information - Inventory, fulfillment, or shipping data - Any data from products you do not select for ad generation
Before reviews are stored or shown to the AI script writer, we sanitize them: - Only the reviewer's first name is kept; last names are dropped - Email addresses, phone numbers, and URLs are stripped from review text - Verbatim review text is never returned to your script; the AI is instructed to echo customer phrasing, not quote it
We use the data described above only to: - Generate your videos; product info, images, and sanitized reviews feed the AI pipeline that writes the script, synthesizes the voice, and renders the avatar - Bill you for credit purchases and consumption - Show your data back to you in the dashboard, embedded admin, and mobile app - Operate the Service, including authentication, security, abuse prevention, and customer support - Improve the product through aggregate usage stats
**We do NOT:** - Sell your personal information - Share your data with advertisers or data brokers - Use your store data to compete with you or other merchants - Use your store data, product data, or generated videos to train AI models
We rely on the following providers to operate the Service. Each handles a specific slice of data, listed in our subprocessor table below. We update this list whenever subprocessors change.
**Authentication:** - Clerk: email and name
**Storage and infrastructure:** - Cloudflare R2: generated videos, voice audio, product images during render - Replit: hosting infrastructure for all data in transit and at rest
**AI content generation:** - OpenAI: script writing and image refinement; receives product description, sanitized review snippets, and scene prompts - Replicate: AI image generation; receives scene prompts and product images - Google (Gemini): image composition; receives scene prompts and product images - D-ID and Hedra: avatar video rendering; receive avatar image and voice audio - ElevenLabs: voice synthesis; receives script text and voice ID
**Payments:** - Stripe: web and mobile payments; receives email and payment details - Shopify Billing: Shopify App Store installs; receives charge metadata only
**Communications and monitoring:** - Resend: transactional email; receives email address - Sentry: crash and error reporting; receives stack traces and redacted request metadata
All data is stored in regions operated by the providers above, primarily in the United States and the European Union. Generated videos are stored on Cloudflare R2 with non-guessable URLs and served publicly only when you choose to share them. Backups are retained for 30 days.
We implement all three GDPR mandatory webhooks required by Shopify: - Customers data request: we do not store any customer-identifiable data, so there is no payload to return; we log the request and respond - Customers redact: same as above; no customer data exists to redact - Shop redact: sent 48 hours after an app uninstall; we hard-delete the entire Shopify store record, the cached reviews, and the cached order aggregates for the shop
We additionally subscribe to the app uninstalled webhook and immediately clear the OAuth access token. The row is fully deleted 48 hours later by the shop redact webhook.
You can, at any time: - Access your data; your dashboard shows everything we hold, and you can email privacy@genflik.com for anything else - Correct your data by editing your profile in-app - Delete your data by deleting videos individually, disconnecting Shopify stores, or emailing us to delete your entire account - Export your data by emailing privacy@genflik.com for a JSON dump of your account, videos, and transaction history - Withdraw consent by uninstalling the Shopify app, logging out, or deleting your account
If you are in the EEA, UK, or California, you additionally have the right to lodge a complaint with your local data protection authority.
No system is perfectly secure; we will notify you within 72 hours of any breach that affects your data.
We use essential cookies for authentication and session management. We may use analytics cookies to improve the Service.
GenFlik is not directed at and not knowingly used by anyone under 16. If you believe we have collected data from a child, contact us immediately and we will delete it.
If we make material changes, we will email registered users and update the Last Updated date at the top of this page. Continued use after notice constitutes acceptance.
For privacy inquiries, deletion requests, or to exercise any of the rights above: privacy@genflik.com