Privacy policy

Who we are

WeLab Studio (shown as WE Studio in the app and in the Shopify App Store) is operated by WebElephant. Questions about this policy go to info@webelephant.nl.

What WeLab Studio stores about you

To give you an account we store your name, email address and password hash, and the actions you take in WeLab Studio (an audit trail your organisation's administrators can see). Your organisation's data, such as products, images and reports, belongs to that organisation and is only visible to its users and to WebElephant staff who support it.

Google user data

Your organisation can connect Google Search Console and Google Merchant Center to WeLab Studio, each as a separate connection. Every connection asks Google only for the permission it needs, plus the email address of the connected Google account:

• Google account email (every connection): so WeLab Studio can show which account is connected.
• Google Search Console (read-only): the list of properties the account can access, and, for the properties your organisation selects, their search performance data.
• Google Merchant Center: the Merchant Center account your organisation registers in WeLab Studio (its name and ID) and, in future reports, its product and performance data. Google requires WeLab Studio to register its Google Cloud project with that Merchant Center account once; WeLab Studio does so with the connected Google account's email address as developer contact, which Google may invite to the account or give the API developer role. WeLab Studio does not create or change products in Merchant Center. The developer registration of WeLab Studio's Google Cloud project on your Merchant Center account stays on that account after you disconnect, until you remove it there.

Why. To show your organisation its search and shopping performance inside WeLab Studio, next to its catalog and marketing data. WeLab Studio uses this data for these user-facing features only.

How it is stored. The access and refresh tokens Google issues for each connection are stored encrypted on WeLab Studio's servers and are only used by WeLab Studio to call Google on your organisation's behalf. The list of properties is kept for the selection screen; the registered Merchant Center account is kept by name and ID. Performance data, once reports exist, is stored per organisation.

Who can see it. The users of your organisation's WeLab Studio account, and WebElephant staff who support that account. WeLab Studio does not sell Google user data, does not share it with third parties, does not use it for advertising, and does not let people read it other than to support your organisation at its request or as required by law.

How long. Until your organisation disconnects that connection. On disconnect WeLab Studio deletes the tokens immediately and revokes its access at Google, unless another WeLab Studio connection of your organisation still uses the same Google account.

How to revoke. In WeLab Studio, under Integrations, open the connection and choose Disconnect. You can also remove WeLab Studio's access at myaccount.google.com/permissions.

WeLab Studio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Shopify store data

Your organisation can connect a Shopify store to WeLab Studio by installing the WE Studio app in Shopify and linking it to your WeLab Studio account. The app asks the store for four permissions: read and write products, and read and write files.

• Products and collections: titles, descriptions, handles, status and product images, so WeLab Studio can show your catalog.
• Files: WeLab Studio uploads the images your organisation approves, and can remove the ones it uploaded.

WeLab Studio does not store customer or order data. When Shopify sends a customer data request or erasure request, WeLab Studio records that it arrived; it has nothing to return or delete.

How it is stored. The access and refresh tokens Shopify issues are stored encrypted on WeLab Studio's servers and only used to call Shopify on your organisation's behalf. A store that installed the app but was not linked to an account within 30 days is forgotten. The imported catalog is stored per organisation.

How long. Until your organisation disconnects the store or deletes the integration. 48 hours after the app is uninstalled, Shopify asks WeLab Studio to erase that store's data, and WeLab Studio deletes its tokens and the imported catalog.

How to revoke. In WeLab Studio, under Integrations, open the Shopify connection and choose Disconnect, and uninstall the app in Shopify → Settings → Apps.

Cookies

WeLab Studio only uses the cookies needed to keep you logged in. There are no tracking or advertising cookies.

Changes

When this policy changes, the date above changes with it. Material changes to how Google user data is used are announced inside WeLab Studio before they take effect.