Effective date: October 1, 2026
Foxy Studio is operated by Barbara Mileo, sole trader (entreprise individuelle) registered in France, who acts as the data controller for the processing described in this policy, except for the form responses described below, which we process on behalf of the merchant. Foxy Studio provides a dashboard for sellers of one-of-a-kind fashion items, available at dashboard.foxystudio.app, together with the Foxy Studio app for Shopify. This policy explains what data we collect, why we collect it, and how we handle it.
We use your data solely to provide the service: managing your inventory, processing your product photos, generating listing content you request, and publishing products as drafts to the sales channels you connect. We process this data because it is necessary to perform our contract with you. Some data is required to use the service, namely your email address to create an account and your store credentials to connect a sales channel; without it, we cannot provide the corresponding features. Technical logs are processed on the basis of our legitimate interest in keeping the service secure and reliable. We do not sell your data, share it with third parties for advertising, or make automated decisions that produce legal or similarly significant effects about you.
Some features send your product photos and product details to third-party AI providers, including Google (Gemini) and KIE.ai, to deliver the results you request, such as photo enhancement or listing text. We only send the content needed for the feature you request, and these providers process it on our behalf to deliver that feature. Product photos may incidentally contain personal data (for example, a reflection); please avoid uploading photos of people you do not have permission to share.
A merchant can add a form to their own store, for example a questionnaire after a booking, and have Foxy Studio receive the responses. When a customer fills in such a form, we receive and store what the customer typed: their answers, and the order number and email address when the form asks for them. We do not check this information, and we do not read customers or orders in the merchant's Shopify store.
We process these responses on behalf of the merchant, who decides what the form asks and why, and who is the data controller for them. They are shown only to the merchant, in their Foxy Studio dashboard. We do not use them for our own purposes, we do not send them by email, and we do not send them to AI providers. They are stored on Supabase in Paris (eu-west-3), and our technical logs for this feature never contain the content of a response.
Responses are deleted automatically 6 months after we receive them. The merchant can delete a response at any time before that.
If you filled in a form on a merchant's store and want to access or erase your answers, contact that merchant. You can also write to us at the address below: we will pass your request on to the merchant and help them carry it out.
Your data is primarily stored in the European Union: our database, authentication and file storage run on Supabase in the Paris (eu-west-3) region. Our web application is hosted by Vercel. Our service providers are Supabase, Vercel, Google, KIE.ai and Shopify. Where a provider processes data outside the EU, we rely on appropriate safeguards: some providers, such as Google, are certified under the EU-U.S. Data Privacy Framework, and other transfers are covered by the European Commission's standard contractual clauses or take place because they are necessary to deliver the feature you request. Contact us for more information about these safeguards. Access tokens for connected stores are stored server-side and are never exposed to your browser.
We only use strictly necessary cookies, to keep you signed in and to secure your session. We use no advertising, analytics or tracking cookies, so no cookie consent banner is required.
We implement Shopify's mandatory privacy webhooks. When Shopify asks us to erase a store's data after the app has been uninstalled, we delete the form responses collected for that store and its form settings. To have your store connection deleted as well, contact us. Because Foxy Studio has no access to customers or orders in Shopify, we do not receive individual customer requests through Shopify: a customer's request about a form response is handled as described above.
We keep your account and inventory data for as long as your account is active. If you delete your account, or ask us to, we delete the associated data within 30 days, and residual copies in our backups are removed within a further 30 days. Technical logs are kept for a maximum of 12 months. You can request deletion at any time by contacting us. Form responses collected for a merchant are deleted automatically 6 months after we receive them.
Depending on where you live (including under the GDPR), you have the right to access, correct, delete or export your personal data, to restrict or object to certain processing, and to withdraw consent where processing is based on consent. Under French law, you may also give directives about what happens to your data after your death. Contact us to exercise any of these rights. You also have the right to lodge a complaint with a supervisory authority; in France, that is the CNIL (www.cnil.fr).
For any privacy question or request: barbara@foxystudio.app
If we make material changes to this policy, we will update this page and revise the effective date above.