Last updated 19 October 2026
Privacy policy
Stillhouse makes product photographs for online stores. To do that it holds your catalogue, the pictures you upload, and the pictures it makes for you. This page says exactly what that means, in the order you would ask.
Who we are
Stillhouse (a sole proprietorship based in British Columbia, Canada) operates the studio at stillhouselabs.com, the Stillhouse app for Shopify, and Stillhouse Try-On. We are the data controller for the account and workspace data described here. For the catalogue data a merchant brings from their store, we act on that merchant's instructions. Shopper data in Try-On is the store's, and has its own notice.
What we collect, and why
| Data | Where it comes from | What it is for |
|---|---|---|
| Your name, email address and sign-in identity | You, when you create an account; or your Shopify store's contact email when you install the app from Shopify | Signing you in, telling you when a shoot finishes, billing receipts |
| Team members' email addresses and roles | A workspace owner or admin who invites them | Sending the invitation and giving each seat its permissions |
| Products: titles, descriptions, prices, variants, product images | A connected store, a CSV you import, or files you upload | Photographing the product, writing alt text, publishing the finished frames back to the product page |
| Sets, models, your logo and house style: the photographs and descriptions you upload or generate | You | Keeping every shoot on the same set, with the same model, in your look |
| The frames, clips and crops the studio makes | Made by us from the above | Your review, download and publishing. They are yours. |
| What you approve, turn down and ask for again | Recorded as you review | Choosing better for your workspace next time. It is not shared with other workspaces. |
| Usage records: which shoots ran, what each frame cost us, which checks it passed | Recorded as the studio works | Metering credits, debugging a failed shoot, keeping the service priced honestly |
| Access tokens for the stores and apps you connect | The store, when you connect it | Reading products and publishing to them. Stored encrypted, discarded when you disconnect. |
| Sales by product, before and after new photos | Your Shopify store's reports, only if you turn the sales report on | Showing whether new photos moved sales. Totals per product only: never orders or customers. |
| Payment details | Stripe (website accounts) or Shopify Billing (App Store installs) | Charging for a plan. Card numbers never reach our servers. |
The Stillhouse app for Shopify does not collect your customers' data. It asks for product and file permissions, plus reports if you turn the sales report on; it never reads orders, customers or checkout.
The AI models we use
To make a frame we send the product photograph, the set and model references, and a written brief to an image model run by a third-party provider (Google's Gemini, or fal.ai's hosted models), and we send frames to a vision model to check that the product in the result is the product you uploaded. Under the paid terms we use them on, these providers process the images to answer the request and do not train their models on them. We do not train our own models on your images.
Every generated frame is marked as generated in its file metadata (the IPTC DigitalSourceTypefield). Frames that include a generated person also carry contains-synthetic-performer in the IPTC keyword field, so that marketplaces and regulators who require disclosure can read it.
Uploaded people
If you upload photographs of a real person to define a model, you confirm at upload that you have that person's permission for us to make images of them for your store. We record who confirmed, when, and from where, and we will remove the model and every frame made from it on request from you or from the person shown.
Where it lives and for how long
- Account, catalogue and image data is stored with our hosting and storage providers, in the United States.
- It stays for as long as your workspace exists. Discarded shoots stay in an archive you can restore from, because you paid for them.
- Per-request provider logs, used for cost accounting, are pruned after 90 days.
- Uninstalling the Shopify app disconnects the store and discards its access token at once; your workspace, sets, models and frames stay so you can reinstall or keep using the website. Forty-eight hours after an uninstall Shopify sends a shop redaction request, and we then remove the store's imported catalogue from the workspace.
- When you delete a workspace we delete its catalogue, images and frames. Billing records are kept as long as tax law requires.
Who else sees it
These companies process data for us, each only for the job named:
| Who | For what | Where |
|---|---|---|
| Google (Gemini) | Making and checking frames, reading products and briefs | United States |
| fal.ai | Fallback image models, cut-outs, clips and 3D views | United States |
| Anthropic | Reading text, where a workspace's settings use it | United States |
| Railway | Hosting the studio's servers and database | United States |
| Cloudflare (R2) | Storing images and files | United States and global edge |
| Vercel | Hosting the website | United States and global edge |
| Clerk | Sign-in for website accounts | United States |
| Stripe | Payments for website accounts | United States |
| Shopify | Payments for App Store installs, and the store connection itself | Canada and United States |
| A transactional email provider | Sign-in, invitation and shoot-ready emails | United States |
A store or marketplace you connect yourself receives the frames you publish to it. We do not sell data, we do not share it with advertisers, and we do not "sell" or "share" personal information as California law defines those words. We tell workspaces before adding a new processor.
Transfers and security
Stillhouse is based in British Columbia, Canada, and data is processed in the United States, where it can be reached by courts and authorities under United States law. Where it comes from the EU, the UK or Switzerland, transfers rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard with each provider. Store tokens are encrypted at rest, images sit in private storage reached only through short-lived signed links, and every workspace's data is kept apart from every other's. A data processing agreement for the catalogue data we handle on your behalf is available on request.
Cookies
We use the cookies sign-in needs - a session, and a token that guards forms against forgery - and nothing else. No advertising cookies and no third-party tracking.
Shopify merchants
Installing the app from the Shopify App Store connects your store to a Stillhouse workspace. We receive product updates from your store as they happen so the studio's catalogue stays current, and we write the frames you approve back to the products you choose. We honour Shopify's mandatory privacy requests: a customer data request returns nothing, because we hold no customer data; a customer redaction request does the same; a shop redaction request removes the store's catalogue from the workspace.
Your rights
You can export your frames from the studio at any time. You can ask us for a copy of everything we hold about you, ask us to correct it, restrict or object to its use, or delete it, by writing to privacy@stillhouselabs.com. We answer within 30 days, and we will not treat you differently for asking. If you are in the EU or UK you also have the right to complain to your data protection authority. In Canada, we follow the Personal Information Protection and Electronic Documents Act and British Columbia's Personal Information Protection Act, and you can complain to the Office of the Privacy Commissioner of Canada or to BC's Information and Privacy Commissioner.
Our privacy officer is accountable for how we handle personal information and can be reached at privacy@stillhouselabs.com.
Children
Stillhouse is for businesses and for people aged 18 or over. We do not knowingly collect data about children.
Changes
When this page changes in a way that matters, we say so in the studio and update the date at the top. We do not quietly widen what we collect.