Privacy notice

EFFECTIVE AUGUST 29, 2026

The Ad Genius LLC operates and provides HonestGate: Age Gate App ("HonestGate"), which is built only for Shopify stores. It helps a merchant collect an ID image after a paid order and review it manually. For buyer ID images, order-linked review data, and reusable age-approval results, the installing merchant determines the purpose, legal basis, retention settings, and initial review decision and generally acts as the controller or business under applicable privacy law. HonestGate processes that data on the merchant's instructions as a processor or service provider.

Data we process

  • Shop and order identifiers needed to bind a review to an order.
  • A normalized JPEG copy of the ID image selected by the buyer.
  • Review status, staff decision, limited note, and audit events.
  • A store-specific Shopify customer ID used to match an eligible later order to a prior approval at that same store.
  • A saved approval result, approved minimum age, approval and expiry dates, last-use date, and revocation state. No date of birth is stored as structured data.
  • Shopify store-staff identifiers, names, and email addresses used for authenticated administration and text-only support tickets, plus ticket subjects, messages, status, and timestamps.

We do not use OCR, face matching, AI approval, or automated date-of-birth extraction. We do not intentionally store an ID number, address, or raw date of birth as structured data.

Checkout-email matching is disabled for the launch version. It will not be enabled unless Shopify grants protected Email access. If a later release enables that feature, this notice will be updated and HonestGate will retain a keyed, store-specific fingerprint for matching rather than the plaintext checkout email. A current guest will not be approved by email alone. The fallback may allow a later authenticated Shopify account to claim its own prior guest approval; two different Shopify customer IDs will never match.

Why we use the data

Data is used only to provide the merchant's age-review workflow, reuse a current human approval for an eligible later order, secure and operate the service, respond to support requests, and meet legal obligations. Raw ID images are not sold, used for advertising, or used to train models.

Security and retention

Images are normalized to remove embedded metadata and kept in private, app-managed object storage—not in a theme or public Shopify Files. A staff member must enter through an authenticated Shopify admin session for the same store before the app authorizes a short-lived view. Merchants choose a raw-image retention period from 1–30 days, with 14 days as the default. A scheduled storage lifecycle rule provides an additional crash-orphan cleanup backstop; the app's retention worker remains the primary deletion control. Raw ID objects are excluded from long-lived backups.

The 1–30 day setting applies only to raw ID images. A reusable approval is separate from the image. The merchant can disable or revoke reuse and chooses an approval lifetime from 30 to 3,650 days; the default is 365 days. Expired or revoked approvals cannot approve a new order. Order identifiers, review status, limited notes, audit records, and support-ticket records can remain after raw-image deletion while needed to provide, secure, and support the service. Uninstall disables the workflow and removes active sessions. Remaining shop-scoped records and tickets are deleted when the applicable Shopify shop-redaction request is completed, unless retention is legally required.

Requests and deletion

Buyers should contact the Shopify merchant shown on their order to request access, correction, or deletion. Shopify privacy requests are processed through the app's mandatory privacy webhooks. A merchant can remove a retained image, revoke a saved approval, or require a new review. Deleting the raw image alone does not revoke the separately stored approval result.

Contact

Privacy inquiries and security reports for The Ad Genius LLC: team@agegateapp.com.

HonestGate: Age Gate App separately determines how it uses limited merchant account, security, billing-support, and support-ticket data needed to operate and protect the service. Buyers should begin privacy requests with the merchant identified on their order so the request can be matched correctly.