How the studio uses data.

Peji Systems operates 3D Balloon Studio, which lets merchants configure balloon products and shoppers customize those products in 3D.

Merchant information

We store the shop domain, Shopify authentication sessions and tokens, and the settings you save: shop display name, accent, colours, palettes, configured product IDs/titles, arrangement settings, variant mappings, and enable status. Shopify session records can include the installing user’s Shopify ID, name, email, locale, and account role. We use these records to authenticate the app, keep each shop’s settings separate, and provide the configured storefront experience.

Products and purchases

The app reads products and variant IDs/titles from your Shopify catalogue so you can choose purchasing mappings. The storefront reads current price and availability from Shopify. When a shopper adds a customized item, its variant, quantity, and chosen arrangement details are sent to your native Shopify cart. Those details can appear on the merchant’s Shopify order. We do not retrieve or store customer profiles, order records, payment details, shipping addresses, or checkout information in the app database.

Design links and room models

Share links contain the shop/product identifiers and selected design options. Anyone with the link can see that design. Generated GLB/USDZ room models may be uploaded for AR. They are kept in private storage and served through unguessable app URLs that become inaccessible after 15 minutes. Expired files are removed on access or by scheduled cleanup. Models contain the generated balloon arrangement. Do not include personal or confidential information in shared designs.

Camera access

AR uses your device’s supported browser or native AR viewer. This app does not upload camera images, room scans, or video to our server. Camera permissions and native AR processing are controlled by your device and its platform provider.

Service providers and technical information

Shopify provides authentication, the product catalogue, cart/checkout, app components, and storefront asset hosting. Cloudflare is the selected application host: Workers processes app requests, D1 stores app records and sessions, and private R2 storage holds temporary room models. Requests necessarily include technical information such as IP addresses and browser headers; the app does not add analytics or advertising trackers. Hosting infrastructure may maintain operational logs and backups under the operator’s configured retention policy. Native AR viewers are subject to the applicable device provider’s privacy policy.

Retention and removal

Merchant configuration and sessions remain while the app is installed. Authenticated app-uninstall and Shopify shop-redaction notifications remove that shop’s sessions, settings, product mappings, and room models from the active app database. Customer data-request and customer-redaction notifications are authenticated; the app has no customer database to export or redact. Customization details already in Shopify carts or orders remain subject to the merchant’s and Shopify’s retention policies. Infrastructure log and backup retention must be confirmed with the operator.

Questions or requests

Contact pejisystems@gmail.com for access, correction, deletion, or privacy questions about app-held data. For an order or customer record held by a shop, contact that merchant.