Privacy policy

Last updated October 5, 2026

Plinth is a Shopify app made by DCODED. It turns a store's product photos into 3D models and adds them to the store's product media, so shoppers can view products in 3D and in augmented reality. This policy explains what data Plinth handles, why, and how long it is kept.

Data we collect from merchants

• Your shop domain and the access token Shopify issues when you install the app.
• Your plan, credit usage and setup progress.
• Feedback you choose to send from the app, with your store name and contact email.

Products and photos

When you generate a model, Plinth reads the product's title and the photos you choose, and sends the photos' addresses to our 3D generation provider, fal.ai, which downloads them, builds the model and returns it. Plinth keeps the model on encrypted storage while you review it, along with the product's ID, title, the photos you picked, the size you entered and the model's status.

When you publish, the model is uploaded to Shopify and saved in the product's media, where Shopify hosts and serves it like a product photo.

Data about your customers

Plinth has no access to your customers or orders and never sees, reads or stores shoppers' names, emails, addresses or orders. Shoppers view published models through your theme and Shopify; Plinth runs no code on your storefront and doesn't track shoppers.

How the data is used

Only to run Plinth for your store: generate and publish models, count credits, and answer your support requests. We do not sell data, use it for advertising, or use your photos or models to train AI. We share data only with the services below.

Services that process data

• Shopify, where the app runs and where published models are stored.
• fal.ai, which runs the AI models that turn product photos into 3D models.
• Fly.io, which hosts the app, its database and draft models in the United States on encrypted storage.
• Resend, which delivers the feedback emails you send us.

This website

plinth.dcoded.dev uses Google Analytics to count visits and see which pages are useful. It sets cookies and receives your IP address and browser details. We don't combine this with app data. You can block it with any tracker blocker or Google's opt-out add-on. The Plinth app doesn't use analytics.

Retention and deletion

• When you uninstall Plinth, Shopify asks us to delete your shop's data after 48 hours, and we delete our model records, draft models and settings then. Published models stay in your product media.
• Deleting a draft in Plinth deletes its files from our storage right away.
• Ask us at the address below and we'll delete your feedback messages sooner.

Security

Data is sent over HTTPS and stored on an encrypted volume. Admin pages require a Shopify session, and preview links to draft models are signed and expire after two hours. Credentials are kept as encrypted secrets, separate from the code.

Contact

Questions about privacy: plinth@dcoded.dev.