Tinker Privacy Policy

Last Updated: March 26, 2026

Introduction

We at Shopify ("Shopify," "we," "our," or "us") are committed to protecting your privacy when you use Tinker, our AI-powered creative platform ("Tinker," "Services," or "App"). This Privacy Policy explains how we collect, use, share, and protect your personal information when you use Tinker.

What Tinker does: Tinker gives you access to cutting-edge AI tools for creating images, videos, audio, and text content. You can explore AI-generated content, create your own artifacts, and organize your projects—all through one simple app.

Our commitment: We’re transparent about our data practices, give you control over your information, and use your data responsibly to provide and improve our Services.

Our Values

Trust is the foundation of Shopify and Tinker, which includes trusting us to do the right thing with your information. Three main values guide us as we develop our products and services:

Your information belongs to you
We limit the information we collect to what we’ve determined we need to provide our services. Where possible, we delete or anonymize this information when we no longer need it. When building and improving our products, our engineers work closely with our privacy and security teams to build with privacy in mind.

We protect your information
We use technical, physical, and procedural safeguards to protect your information. We regularly review our practices to make sure we’re effectively protecting your data.

We’re transparent about what we do
This policy is our way of being transparent about our privacy practices. We also provide you with tools to control your information and make choices about how it’s used.

1. Information We Collect

Information You Provide

Account Information: When you create a Tinker account, we collect your name, email address, and other account details.

Your Creative Content: We collect the content you provide for use with our AI tools, including:

Communications: If you contact our support team, we collect your messages and any information you provide.

Information We Collect Automatically

Usage Information: We collect information about how you use Tinker, such as:

Technical Information: We collect information about the computers, phones, and other devices you use to interact with Tinker and connection information, including:

Cookies and Similar Technologies: We use cookies and similar technologies to operate our Services and remember your preferences. You can learn more about our use of cookies in our Cookie Policy.

2. How We Use Your Information

We use your information to:

Important note about AI-generated content: Our AI tools predict and generate content based on patterns in data, but they may not always be factually accurate. Please don’t rely on AI outputs for important decisions without verification.

3. How We Share Your Information

AI Service Providers: We work with third-party AI companies (like OpenAI and others) to power our tools. These companies process your prompts and content solely to provide AI services to us—they are contractually prohibited from using your information for their own purposes or to train their models.

Service Providers: We share information with trusted companies that help us operate Tinker, such as:

These providers can only use your information to provide services to us and are contractually bound to protect your data.

Safety and Legal Requirements: We may share information:

Shared Content: If you choose to share artifacts publicly via share links, that content becomes accessible to others through the link you create.

Change of Control: We may share your information with actual or prospective acquirers, their representatives and other relevant participants in, or during negotiations of, any sale, merger, acquisition, restructuring, or change in control involving all or a portion of Shopify’s business or assets, including in connection with bankruptcy or similar proceedings.

We don’t sell your personal information to third parties. We don’t use your personal information for advertising without valid consent.

4. Your Privacy Rights

Depending on where you live, you may have the right to:

How to exercise your rights: You can manage most of these preferences directly in your Tinker account settings, or contact us at tinker-support@shopify.com for assistance.

5. Where We Send Your Information

We are a Canadian company, but we work with and process data about individuals across the world. To operate our business, we may send your personal information outside of your state, province, or country, including to the United States. This data may be subject to the laws of the countries where we send it. We take steps to protect your information when we send it across borders.

Transfers Outside of Europe, UK, and Switzerland

If you are located in the EEA, the UK, or Switzerland, your personal information is received by our Irish affiliate, Shopify International Ltd. Your information is then sent to other Shopify locations and to service providers who may be located in other regions, including Canada (where we are based) and the United States. When we send your personal information outside of the EEA, UK or Switzerland, we do so in accordance with applicable law.

If you are in the EEA, the UK, or Switzerland, when we send your personal information to Canada it is protected under Canadian law, which the European Commission has found adequately protects your information. If we then send this personal information outside of Canada (for example, when we send this information to our service providers), this information is protected by contractual commitments that are comparable to those provided in the Standard Contractual Clauses.

6. How Long We Retain Your Information

We will retain your personal information only for as long as necessary to fulfill the purposes for which we have collected it. To determine the appropriate retention period, we consider the amount, nature and sensitivity of your personal information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.

We will also retain and use your personal information to the extent necessary to comply with our legal obligations, resolve disputes and enforce our policies. If you delete your account with us, we will delete your information or store your information in an aggregated and anonymized format.

You can delete individual artifacts or your entire account at any time through your account settings.

7. Age Requirements

No collection from children under 13: We don’t knowingly collect or solicit information from children under 13. If we discover we’ve collected such information without verification of parental consent (where required), we’ll delete it promptly. If you believe that we may have information about a child under 13, please contact us at tinker-support@shopify.com. The service and our content are not directed at children.

8. How We Protect Your Information

Our teams work to protect your information and the security and integrity of our platform. We maintain reasonable technical, physical, and procedural safeguards to protect your information from unauthorized access, use, or disclosure. However, no method of transmission over the Internet, and method of electronic storage, can be 100% secure. This means we cannot guarantee the absolute security of your personal information.

9. How We Use "Cookies" and Other Tracking Technologies

We use cookies and similar tracking technologies on our website and when providing our services. For more information about how we use these technologies, including a list of other companies that place cookies on our sites and an explanation of how you can opt out of certain types of cookies, please see our Cookie Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we’ll notify you through the app or by email. The updated policy will include a new "Last Updated" date at the top.

11. How You Can Reach Us

If you would like to ask about, make a request relating to, or complain about how we process your personal information, please contact us at: tinker-support@shopify.com.

If you are located in Canada or the United States, your personal information is received and controlled by:

Shopify Inc.
Attn: Privacy Officer
151 O’Connor Street
Ground Floor
Ottawa, Ontario K2P 2L8
Canada

If you are located in the EEA, the UK, the Middle East, South America, or Africa, your personal information is received and controlled by:

Shopify International Ltd.
Attn: Data Protection Officer
c/o Intertrust Ireland
2nd Floor 1-2 Victoria Buildings
Haddington Road
Dublin 4, D04 XN32
Ireland

For users in the European Union, United Kingdom, or Switzerland, you can also contact our Data Protection Officer at tinker-support@shopify.com or file a complaint with your local data protection authority.

If you are located in Asia, Australia, or New Zealand, your personal information is received and controlled by:

Shopify Commerce Singapore Pte. Ltd.
Attn: Data Protection Officer
77 Robinson Road,
#13-00 Robinson 77,
Singapore 068896

12. Supplemental Disclosures for European Users (EEA, UK, Switzerland)

Legal Bases for Processing

Purpose Categories of Data Legal Basis
Provide and maintain Tinker Services Account Information, Creative Content, Usage Information, Technical Information Contract - necessary to perform our agreement with you; Consent - for the use of not strictly necessary cookies
Improve our products and Services Creative Content, Usage Information Legitimate interests - improving our Services benefits our users; Consent - for the use of not strictly necessary cookies
Communicate about Services Account Information, Communications Contract - necessary for service delivery; Consent - for marketing communications
Safety and fraud prevention All categories as necessary Legitimate interests - protecting our users, employees, and Services
Legal compliance All categories as necessary Legal obligation - compliance with applicable laws

13. Supplemental Disclosures for U.S. Residents

This section of the policy applies to Tinker users that are located in the United States. In certain U.S. states, Tinker users have additional rights afforded to them under applicable state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Utah Consumer Privacy Act and the Virginia Consumer Data Protection Act.

(a) Categories of personal information collected by Tinker

For more details about the personal information Tinker has collected in the past year, please see section 1, "Information we collect." For details on how we use that information, who we share it with, and how long we keep it, please see section 2, "How we use your information," section 3, "How we share your information," and section 6, "How long we retain your information."

(b) Rights in respect of your personal information

These state privacy laws give resident users various rights with respect to the personal information we collect, including the right to (subject to applicable law and certain limitations):

Submit requests through your Tinker account settings or email us at: tinker-support@shopify.com. We may need to verify your identity before processing requests.

Authorized Agents: You may designate an authorized agent to make requests on your behalf with proper authorization.

Appeals: If we deny your request, you may appeal by contacting us at: tinker-support@shopify.com.


Note: This privacy policy applies specifically to Tinker. If you use other Shopify services, those are covered by separate privacy policies.