What Orbling reads, writes, keeps and deletes

Who processes the data

ARLing s. r. o., Ivanská cesta 19112/32E, 821 04 Bratislava, Slovakia. Company ID (IČO) 56583486, VAT ID SK2122352100. Contact: support@arling.sk.

This policy covers the Shopify app Orbling: AI Store Builder (Orbling). The arling.sk website has its own policy at arling.sk/privacy/en/.

What the app can read

The app asks Shopify for six permissions. It does not ask for theme write access (write_themes) or theme read access (read_themes), so it can neither see nor change your theme code.

The app also reads your store currency, whether the store is a development store, and the status of your Orbling subscription. It asks for the product vendor, the time of the last product update and your store's primary domain, but does not store them. It does not query customers, inventory, barcodes, collections, tags or SEO fields.

The app sets no cookies and uses no advertising or analytics tracking. Inside the Shopify admin it loads only Shopify's scripts (App Bridge and Polaris) and its own script.

What the app writes to your store

Orbling changes nothing in your store until you prepare a preview or apply. It never changes product titles, descriptions, images, prices or variants, and it does not create collections, menus, pages or policies. It writes only these:

• Product metafield $app:orbling, key stranka: the page content you apply. The product category, your confirmed facts, benefits, fit, box contents, questions, comparisons and audience texts, the look, the bundle tiers, and the text of your shipping and refund policies.
• Product metafield $app:orbling, key nahlad: the same content as a draft. Your theme reads it only inside the theme editor.
• App metafields orbling.look and orbling.look_preview: the look preset (colors, corner radius, spacing and type style), used on pages without Orbling product content, such as the home page.
• Automatic discounts whose title starts with Orbling, followed by the product number, the quantity (2 or 3) and an operation key. Each applies only to that product from 2 or 3 items, has no end date and does not combine with other discounts.

Turning off. "Turn off bundle discounts" on the "Theme setup" screen hides the savings on the page and deletes the Orbling discounts for that product. The page content stays. If a price or an Orbling discount is changed or deleted in Shopify so that the saving no longer matches your settings, the app does the same by itself.

Cancelling the subscription stops further charges. It does not remove content or discounts that are already in your store.

Uninstalling ends the app's access, so after that it cannot change or remove anything in your store. Before you uninstall, select "Turn off bundle discounts" for each product, or afterwards delete the discounts whose title starts with Orbling in Shopify admin under Discounts. To hide the content, remove the Orbling blocks and the Orbling Look app embed in the theme editor.

Buyers and orders

The Orbling theme blocks set no cookies, use no browser storage and send nothing to our servers. Apart from loading their own script and style files from Shopify, the only request they can send goes to your store's own cart. Outside the theme editor preview, when a buyer submits a product form connected to the Buy box, the script adds a hidden _orbling cart attribute and line item property. Their JSON value is {"v":1,"product":"<id>","look":"<look>"}: a version, product ID and look name, with no personal data. It also sends the cart attribute to the store's own cart/update.js. The request has a four-second timeout in browsers supporting AbortSignal.timeout. If marking fails, the script still submits the purchase form; the order may then have no usable attribution.

Today the app receives no orders. The order events orders/create, orders/paid, orders/cancelled and refunds/create are switched on only after Shopify approves the app's access to protected customer data, without the name, address, phone and e-mail fields. Cart marking is already implemented. Orders can be counted only after approval and activation of those webhooks. Until then the Revenue screen stays empty and no orders are counted. Orbling Growth costs 19.00 USD every 30 days after a 7-day free trial, with no usage or other app charges. Development stores always use test billing.

Once they are switched on, Shopify sends each order event in full, and it can include buyer details. The app reads only these fields: order and line item IDs, product IDs, quantities, prices, discounts and taxes on marked lines, the currency, whether prices include tax, the created and updated times, whether the order is paid, a test or cancelled, the _orbling marker, and for refunds the refund ID, the refunded line items, quantities and amounts.

For each order event the app stores a record with the order ID, the times, the paid, test and cancelled flags, the marked lines (line ID, product ID, look, net amount, currency and quantity) and the refunds. The app does not store a buyer's name, e-mail, phone, address or customer ID, the IP address, the order note or the event itself.

What we store, why and for how long

Imported files and AI suggestions

CSV, TXT and PDF files you import are read in your browser. The file is never uploaded; only the text in the form is sent when you select "Build my page". PDFs are read without OCR and without any network request.

AI suggestions run on Cloudflare Workers AI (the Llama 3.3 70B model), when you select "Improve with AI" with an active trial or subscription, or automatically on return after approving the plan from Preview. The request contains our instructions, your confirmed facts with the source you entered for each, the product title and category, and eligible plain text from the product description in Shopify. The description is shortened to 4,000 characters and omitted if it has fewer than 20 characters or contains detected markup, template code or script URL schemes. Prices, policies, your store domain, unconfirmed research, orders and buyer data are not added as separate fields. Such details can still appear inside text you supply, so do not include personal data in product text or facts.

AI can rewrite sentences and FAQ. An automated rules check rejects detected unsupported numbers, materials and certificates, as well as superlatives, reviews, ratings, urgency and health claims. Fact values must appear word for word in a source. Each suggestion shows its source; acceptance checks that the saved source has not changed. These checks do not verify that the source itself is true: check every suggestion before "Accept all". Each store has up to 20 attempts per day (UTC), and an additional daily AI capacity limit is shared by all stores. Failed attempts can use the limit.

Cloudflare states that it does not use customer content sent to Workers AI to train AI models (Workers AI data usage). The app sends store data to no other AI provider.

Uninstalling and erasure

1. When you uninstall the app, we delete the access tokens as soon as we process the uninstall event (app/uninstalled). From then on the app runs no action, event or scheduled task for the store, other than Shopify's privacy requests. Your Orbling data stays until erasure.
2. 48 hours after you uninstall, Shopify sends us a request to erase the store's data (shop/redact). When we process it, we delete everything Orbling stored for the store (page records, facts and research, discount, subscription, operation and order records, AI counters), and the store record, tokens, stored answers and locks.
3. If erasure fails, the request stays to be retried and nothing is marked as done.
4. If you reinstall the app before the erasure request arrives, erasure still deletes all Orbling data for the store, including what you created after reinstalling. Access for the new installation stays.
5. A customers/redact request deletes the order records for the orders named in it.
6. For a customers/data_request, the app records the request. Orbling stores no buyer's name or contact details, and today it holds no order records. If a request names orders the app holds technical records for, nothing is sent automatically: write to support@arling.sk and we send you those records by e-mail, prepared by hand.
7. After erasure only the record of the handled request, the event delivery records, the Cloudflare technical logs and any support e-mails remain, for the periods in the table above.

Legal basis

Providing the app you installed, and the Orbling Growth subscription: performance of a contract (Art. 6(1)(b) GDPR). This includes order records used to show attributed revenue after order access is approved. Revenue does not determine charges for the current fixed-price plan.

Technical logs, operation records, protection against double processing and proof of handled requests: our legitimate interest in a secure and demonstrably correct service (Art. 6(1)(f) GDPR).

Support e-mails: our legitimate interest in answering your questions about the app (Art. 6(1)(f) GDPR).

Store data is mostly business data. It can be personal data if the store is run by an individual, or if a product title, fact or research text contains a person's name.

The app makes no decisions with legal effect. Attributed revenue is a sum of marked order lines; it is not proof that Orbling caused a sale.

Who else handles the data

The app itself sends no store data to Anthropic; only what you write to support reaches it. We do not sell data or use it for advertising.

Your rights

You have the right to access, correct and erase your data, to restrict processing, to data portability and to object. Write to support@arling.sk from an address we can link to the store, or uninstall the app (erasure as described above).

You can complain to the Slovak data protection authority: Úrad na ochranu osobných údajov Slovenskej republiky, Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.

When this policy changes, we change the date at the top of the page.