Privacy policy

Last updated 4 November 2026

CopySpotter is a Shopify app made by Support Labs, a UK business. This page explains what the app collects, why, who else handles it, and how long we keep it. Questions or requests: support@supportlabs.co.uk.

Who is responsible

Support Labs is the data controller for the information below. Contact us at support@supportlabs.co.uk. We reply within one working day.

What we collect from your Shopify store

Your shop's name and web addresses.
Your active products: title, description, vendor, product page address and photo addresses. The app asks Shopify for permission to read products only.
The login session Shopify gives the app, so it can read your products. Shopify may include the name and email of the staff member who opened the app.

The app never reads your orders, customers or payments, so we hold no data about your customers.

What you give us

Takedown details you type in Settings (business name, contact name and role, reply email, address if you add it). They are only put into the drafts you see. We never send a takedown for you.
Your choices in the app: stockists, products switched off, and copies you mark as dismissed, removed or yours.

What the app finds on the public web

Pages that show your photos: the address, page title, the photo and how close it is to yours.
Screenshots of those pages, only when you press "Take a screenshot".
Public website certificate records and web addresses similar to yours, and new UK trade mark applications similar to your shop's name, from the UK Intellectual Property Office's public journal.

Why we use it

Only to run the service you installed: finding copies of your products and preparing takedown drafts. Our lawful basis is the contract with you (providing the app). We do not sell data, use it for advertising, or train AI models on it.

Who else handles it

Shopify: hosts your store, logs you in to the app and bills your plan.
Cloudflare: runs the app, stores its database and takes screenshots.
SerpApi: receives the address of one product photo at a time and returns Google Lens image search results.
crt.sh and Cloudflare DNS: receive your shop's name or web address to look up similar addresses.

Some of these companies process data outside the UK. They use the safeguards UK law requires, such as the UK International Data Transfer Addendum or the UK-US data bridge.

How long we keep it

While the app is installed, we keep your data so it can show past copies and drafts.
When you uninstall, Shopify tells us 48 hours later and we delete everything we hold about your shop: products, copies, screenshots, drafts, settings and sessions.
Technical logs (no product data or passwords) are kept by Cloudflare for a few days.

Your rights

You can ask to see, correct or delete your data, or object to how we use it, by emailing support@supportlabs.co.uk. Uninstalling the app deletes it all. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If we change this policy we will update this page and the date at the top.

Questions: support@supportlabs.co.uk · 07725 521854