Legal
Privacy Policy
Last updated: August 28, 2026
YourLightAR ("we", "us", "the app") is a Shopify app built by STAMX that lets merchants turn product photos into 3D models their customers can view in augmented reality. This page explains what data the app collects, why, and how it's handled.
Who this applies to
This policy covers two groups: merchants who install YourLightAR on their Shopify store, and their store's customers who view AR content the merchant created with the app.
What we collect from merchants
- Store information — your shop's domain and the access token Shopify issues when you install the app, so we can make API calls on your behalf.
- Product data — the titles and IDs of products you choose to attach a 3D model to, and the metafields we write to store the model's file URL and real-world dimensions.
- Photos and files you upload — product photos you submit for AI 3D generation, and any .glb/.usdz files you upload directly, are processed to create the 3D model and stored so it can be shown on your storefront.
- Billing information — your subscription plan and status. Shopify itself handles and stores all actual payment details (card numbers, etc.) — we never see or store them.
What we collect from a merchant's customers
The AR viewer shown on a merchant's product pages does not collect any personal information from shoppers. It doesn't use cookies, doesn't track individual visitors, and doesn't share any data with us. It simply displays the 3D model the merchant attached to that product.
Third parties we use
- Shopify — hosts the store, authenticates the app, and processes billing.
- Meshy AI — when you use the "photo to 3D model" feature, your uploaded photo is sent to Meshy's API to generate the 3D model. Meshy processes the photo only to produce the model and does not receive any other store or customer data.
- Railway — hosts the app's server and database (store info, product references, and model metadata).
How long we keep data
We keep your store's data for as long as the app is installed. When you uninstall YourLightAR, we automatically delete your store's access token and stop all API access. You can request full deletion of any remaining data at any time by emailing us (see below) — Shopify also automatically notifies us to erase shop data 48 hours after uninstallation, in line with Shopify's standard app requirements.
Your rights
Depending on where you're located, you may have rights under laws like the GDPR or CCPA to access, correct, or delete your data. To exercise any of these rights, contact us at the email below and we'll respond promptly.