Your design stays private.

Updated 13 October 2026. ProofRelay is operated by Dijital Pilot, Ali Köker, in Antalya, Türkiye. Contact [email protected] about privacy or support. The store that sends a proof controls its customer records; ProofRelay processes those records to provide the store’s approval workflow.

What we process and why

We process the store’s Shopify domain, order and item identifiers, order number, product title, uploaded image versions, store notes, customer feedback, approval times and activity history. We read item quantities and customisation details to detect changes and store a fingerprint of those details. Images and feedback can contain information supplied by the store or customer. We do not request Shopify customer name, email, address or phone fields. Shopify access credentials and the store’s agreement version and acceptance time are stored to operate the integration.

We use this information only to display a design, collect an explicit approval or change request, preserve its version history and help the store verify the approved version before production. We do not sell customer data, use it for advertising, train AI models on it, or make automated decisions with legal or significant effects. A design approval is a customer’s own decision; it is not marketing consent.

Who can access it

Authorised Shopify store staff and the person holding a private review link can access the relevant proof. Links expire after 30 days, a new version retires the previous link, and uninstalling revokes customer access. Share links only with the intended recipient.

Hosting and security

The application runs on Oracle Cloud Infrastructure in Frankfurt, Germany. Cloudflare provides HTTPS and network protection. HTTPS protects network traffic, Oracle encrypts the storage volume at rest, and recovery snapshots are separately encrypted. Access credentials remain on the server. Limited operator access is used for support, security and recovery. These service providers may process network metadata needed to deliver and protect the service.

Retention and deletion

Proof jobs and their images, feedback and history are retained for up to 365 days from the job’s creation, subject to the plan’s storage limit. Daily maintenance removes expired jobs. Completed data-request records are removed after 30 days. Shopify customer-redaction requests remove related proof records, and Shopify’s shop-redaction request after uninstall removes the store’s remaining application data, credentials and agreement record.

Encrypted recovery snapshots are kept for up to seven days. A deleted record can remain in a snapshot during that period; snapshots are used only for recovery, and deletion requests must be reapplied before recovered data is made available. Routine service logs are limited to operational information; proof images, feedback, access credentials and private review links are not intentionally logged.

Your choices

Contact the store that sent your proof to request access, correction, withdrawal from the workflow or deletion. The store can export data-request records through the app and contact us for assistance. For questions about ProofRelay’s handling, contact our support address. The Terms and Data Processing Agreement describe the store’s and our responsibilities.