Last updated 9 October 2026
Herolight is a Shopify app made by Entafix. It makes product photographs, short product videos and ads from the photographs a merchant already has, for the merchant to review and apply. This page says what the app reads, what it keeps, who it shares it with, and how it is deleted.
When you install Herolight you grant it access to your products (read and write). It reads product titles, descriptions, types, vendors, categories, variants' SKUs and barcodes, and product media, and it writes only what you approve: new photographs and videos, each with a short image description. It asks for no other permission.
Herolight does not request access to customers or orders. It never reads, stores or processes any information about your customers.
For each store that installs it, Herolight keeps:
• your store's myshopify.com address and the access token Shopify issues to the app;
• your plan, credit balance and a record of what credits were spent on;
• your settings (app language, file format, the house looks you keep, and the logo you upload for the box in unboxing videos);
• the jobs you run: which products, which photographs, the generated photographs, videos and ads, and whether you applied them, so you can review, download or undo them;
• what our image-reading step noted about your product photographs (for example the product type or whether a logo is visible), so the same photograph is not read and charged twice;
• the result of the free store check;
• photographs you upload yourself, including reference photographs of models you choose to use;
• the reason and note you give when you report a bad photograph.
Herolight does not store the names or email addresses of your staff. Generated photographs are stored at web addresses that are not listed or indexed anywhere, so that they can be shown in the app and copied onto your products.
To make a photograph, a video or an ad, the app sends the product photograph and the product's own text to AI models run by fal.ai (United States), which hosts the image and language models Herolight uses. Only what that one job needs is sent, and no customer data exists to send.
The app and its database run on a cloud hosting provider, and photographs are stored with Cloudflare R2. Payments are handled entirely by Shopify through its billing system; Herolight never sees card details.
When a run finishes with a photograph that needs checking, or when you report a photograph, a short message with your store address, the run's numbers and your note may be sent to our own team's chat so a person can look at it.
We do not sell data, and we do not use it for advertising.
Everything above is kept while the app is installed. When you uninstall, the access token is deleted at once. Shopify then sends a deletion request 48 hours later, and Herolight deletes every record and every stored file that belongs to your store: jobs, generated photographs and videos, uploads, readings, the store check, settings and the credit record. Photographs and text that you already applied to your products stay in your store, because they are yours. One thing is kept: a one-way fingerprint (a SHA-256 hash) of your store's address, which cannot be turned back into the address. It only records that your store has already received the free signup credits, so that reinstalling does not grant them again.
Because no customer information is held, a customer data request or a customer deletion request forwarded by Shopify has nothing to return or erase.
You can ask what we hold about your store, ask for a copy, or ask for it to be deleted before you uninstall, by writing to [email protected]. If you are in the European Economic Area or the United Kingdom you also have the right to complain to your data protection authority.
If this policy changes, the date at the top changes with it.