Privacy policy

Who we are

Aoloha operates Proofdrop, BookUp, ThemeUp and aoloha.com. For privacy questions or requests, contact hello@aoloha.com.

For merchant account, connection, security, and support information, Aoloha determines how information is used to provide and protect the service. For customer photos, we process uploads on the merchant’s behalf. The merchant determines why the photos are collected, which storage provider is used, who can access them, and how long to keep them.

Information we handle

• Merchant and app information: Shopify store domain, app settings, encrypted Shopify access and refresh credentials, and installation status.
• Google connection information: the connected merchant’s Google email address and account identifier, encrypted access and refresh credentials, and the app folder identifier.
• Uploads: customer photo bytes while processing an upload, generated filenames, file and job identifiers, storage provider, photo links, timestamps, and processing status. Images may contain personal information or embedded metadata; Proofdrop does not promise to remove image metadata.
• Security and operations: request information handled by our hosting and security providers, security-check results, temporary authorization data, and hashed network identifiers used for rate limiting.
• Support: the email address, message, and other details you choose to send us.

Proofdrop does not store customer contact-form names, email addresses, message text, customer account IDs, or order records in its app database. Those contact-form fields are handled by the merchant’s Shopify store. This does not prevent a customer from including personal information in a photo.

ThemeUp backup and recovery data

ThemeUp processes the Shopify store data you select to create backups or restore supported records. This can include theme files and settings, product and content data, customer names and contact details, addresses, and order history, subject to store permissions and coverage. Merchants control the purpose of this processing and must be authorized to handle the data.

Archive preparation and import use the browser working session. The current release does not retain backup archives or a persistent backup and restore history on Aoloha servers. Data needed for authorized restore requests passes through the app service to Shopify; larger files may be uploaded directly to Shopify staging services. Connection metadata, encrypted Shopify credentials and subscription information are handled to authenticate the store and enforce access.

Downloaded archives remain under your control until you delete them. Closing or reloading the app clears its browser working session. Archive encryption is optional; protect unencrypted copies and keep encryption passwords separately. Aoloha cannot reset archive passwords.

Google Drive backup and automatic syncing are not offered in this release. Uninstall and shop-redact webhooks remove stored connection credentials and app metadata when processed; they do not delete files you downloaded or data already restored to Shopify.

For access or deletion requests about information Aoloha holds, contact hello@aoloha.com. Customers should contact their merchant about data held in store backups. Do not send backup archives or sensitive customer records by email.

BookUp and Google Calendar data

BookUp connects one merchant Google account per Shopify store. It accesses calendar identifiers, names, time zones and permissions to offer booking destinations. For availability it requests event times, cancellation/free-busy information and limited attendee response information; event titles, descriptions and locations are not requested for availability.

When a booking is confirmed or a request is submitted, BookUp processes the chosen dates, product and variant references, and any name, email address or message supplied on its booking form to create or update the relevant event in the merchant’s Google Calendar. Native approval requests use an organizer calendar and an invitation to the merchant’s primary calendar. Paid booking details and processing state are recorded in the merchant’s Shopify order. This data passes through our Cloudflare-hosted service.

BookUp retains encrypted Google and Shopify authorization, store settings, calendar choices and metadata, calendar-notification channel metadata, product/calendar/pricing rules and hashed rate-limit counters. It does not retain a lasting customer booking history, order archive, event-content archive or contact profiles in its app database. Busy intervals are cached in memory for up to 60 seconds; temporary encrypted reservation locks normally expire after 15 minutes and are removed after confirmation or expiry cleanup. Temporary sign-in state expires after ten minutes.

Google Calendar data is used only to provide calendar selection, availability, booking creation and updates, native approval synchronization and related service security. We do not sell this data, use it for advertising or use it to train general-purpose AI models. BookUp’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Disconnecting Google in BookUp removes stored Google authorization and disables new bookings. You can also revoke access in your Google account. Uninstalling removes app-owned credentials and metadata. Calendar events and Shopify orders already created remain in those accounts under the merchant’s control. Contact hello@aoloha.com for privacy requests.

How we use information

We use this information to authenticate merchants, save app preferences, connect selected storage, upload photos, add photo links to contact messages, provide cleanup controls, prevent abuse, resolve support requests, and meet legal obligations. We do not sell personal information, use uploaded photos or Google user data for advertising, or use them to train general-purpose AI or machine-learning models.

Where applicable, the grounds for handling merchant and support information are providing the requested service, our legitimate interests in maintaining a secure service and responding to requests, and legal obligations. Google account access requires the account holder’s authorization. Merchants are responsible for a lawful basis and appropriate notices for their customers’ uploads.

Google user data & Limited Use

Proofdrop requests Google Drive’s https://www.googleapis.com/auth/drive.file scope to create and manage the app’s folder and uploaded photos, and https://www.googleapis.com/auth/userinfo.email to identify the connected merchant account. The Drive permission is limited to files created by or explicitly opened with the app; Proofdrop’s implementation uses its app-created folder and upload registry. It does not request broad access to the rest of your Drive.

We store your Google email and account identifier to show and match the connected account. Encrypted tokens let the service carry out the upload and cleanup features you authorize. We retain the folder and app-created file identifiers to deliver links and track cleanup.

Proofdrop’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Google user data is used only to provide or improve the user-facing storage and cleanup features. Transfers are limited to what is necessary for those features, security, applicable law, or a permitted business transfer with appropriate consent. Human access is limited to your affirmative agreement to view specific data, necessary security investigation, legal compliance, or permitted internal operations using aggregated and anonymized data. We do not use Google user data for advertising, creditworthiness, lending, or general-purpose AI training.

Storage, providers & sharing

Google Drive: files stay in the connected merchant’s app-created private folder. Proofdrop does not make them public. Access follows permissions controlled by the merchant and Google.

Shopify Files: photo URLs are public. Anyone who receives a link may be able to access the photo. Photo links are added to the existing Shopify contact form and delivered through the store’s normal contact-message flow.

Cloudflare: hosts our website and upload service, processes photo bytes in transit through the service, stores app metadata and encrypted credentials in D1, and provides Turnstile security checks. We do not persist image binaries in our own Cloudflare storage.

Email: our email provider processes messages you send to support. We may disclose information when required by law or necessary to protect the service, and to providers only as needed for their role. We do not share Google data or customer photos with advertising brokers.

Our providers may process information outside your country. Applicable provider agreements and legally required transfer safeguards govern those transfers. Provider privacy information: Cloudflare, Shopify, and Google.

Retention & deletion

• Photos remain in the merchant’s Google Drive or Shopify Files until the merchant deletes them. Uploads can remain even if the customer abandons the form.
• Temporary upload-job records are eligible for removal after 24 hours; expired authorization grants and older rate-limit records are also removed during subsequent authorization activity. This is activity-triggered cleanup, not a guaranteed deletion at an exact time.
• The app-created photo registry remains to support cleanup, including records marking completed deletions, until app metadata is removed.
• Merchant settings and connection information remain while needed for the installation. Disconnecting Google Drive removes the stored Drive connection and pending authorization information. Uninstall and shop-redact webhooks remove app-owned metadata and credentials when received and processed.
• Support messages and operational records are kept only as needed for support, security, and applicable recordkeeping obligations; deletion requests are reviewed for these purposes.

Disconnecting or uninstalling does not delete photos already stored with the merchant. Use the app’s cleanup controls before disconnecting or uninstalling, or manage the files directly in the storage provider. Cleanup is permanent and breaks existing photo links. We do not empty your Google Drive Trash.

Your choices & privacy requests

Merchants can disconnect Google Drive in Proofdrop and revoke access through Google Account connections. Revoking access stops future authorized API activity but does not delete existing stored photos or all app metadata by itself.

Depending on your location and the information concerned, you may have rights to access, correct, delete, restrict, object to processing, or receive a portable copy of your personal information, and to withdraw consent where processing relies on it. Send requests to hello@aoloha.com. We may ask for information necessary to verify your authority. You may also complain to the relevant data-protection authority.

Customers should first contact the store that collected their photo, because the merchant controls that photo and its storage. Aoloha can assist with app-related information it holds. Please do not email passwords, access tokens, or sensitive photos with your request.

Website, cookies & security

This website contains no contact form, advertising trackers, analytics scripts, or app-created cookies. Contact buttons open your email application. Cloudflare may process connection and security information as our hosting provider. The app’s upload security check uses Cloudflare Turnstile; Shopify, Google, and their services have their own cookie and privacy practices.

We use encrypted stored credentials, authenticated merchant actions, signed requests, bounded uploads, and security checks. No system can guarantee absolute security. Merchants should avoid asking customers to upload identity documents, payment details, health information, or other sensitive personal information.

Children & policy updates

Proofdrop is intended for merchants managing their stores, not as a service directed to children. Merchants should configure their forms appropriately for their audience and legal obligations. If you believe information about a child was submitted improperly, contact the collecting store or Aoloha.

We may update this policy to reflect changes in the service or legal requirements. The effective date above identifies this version. Material changes will be communicated through an appropriate service channel where required.