Privacy policy

Last updated: October 21, 2026

1. Who we are

Scale Theme provides Shopify theme files, licensing, updates, documentation and related account tools through scaletheme.com and app.scaletheme.com. The operator and data controller is identified in our Legal Notice. Contact: support@scaletheme.com.

2. Information we process

We process account and contact details; purchase references and license entitlements; connected store domains and connection status; support correspondence; and technical information such as IP address, device/browser information, timestamps and security events. If you connect Shopify, we process the authorization credentials and theme information needed for the features you request. Theme updating and store-building tools can process theme files, configuration, product information, uploaded material and generation instructions you submit. Do not submit customer lists, payment information or other sensitive data to these tools.

Payment details are handled by the checkout provider identified when you pay. We receive order, payment-status and entitlement information needed to fulfil your purchase; this does not mean we receive your full card details.

3. Purposes and legal grounds

We use information to deliver purchases, manage accounts and licenses, connect stores, provide updates and support, operate requested tools, prevent fraud and unauthorized distribution, maintain security, and meet applicable accounting and legal obligations. Where relevant law requires a legal basis, we rely on contract performance, legal obligations, legitimate interests subject to your rights, or your consent, as applicable. Marketing and optional tracking require consent where the law requires it; buying a license does not by itself constitute marketing consent.

4. Service providers and disclosures

Our services use Shopify for the storefront and store integrations, Supabase for account/database/storage services, Vercel for application hosting, and providers for email, caching and payment processing. AI-enabled features may send the material you submit to Google's Gemini service to fulfil your generation request. These providers process information according to their roles and applicable terms. We may also disclose necessary information to professional advisers, authorities where legally required, or a successor in a business transfer with appropriate safeguards. We do not publish your license keys or use your private submitted material as public testimonials without permission.

5. Cookies and privacy choices

Essential technologies support sessions, security, preferences and checkout. Optional analytics or advertising technologies may measure visits and campaigns when enabled and permitted. Use the site's cookie controls or privacy choices to manage available options. Withdrawing consent does not affect earlier lawful processing. Browser settings can also restrict cookies; some essential functions may then be unavailable. See our Cookie Policy.

6. International processing

We operate from Türkiye and our providers may process information in other countries. Where applicable law requires safeguards for a transfer, the relevant lawful mechanism must apply, such as an adequacy decision or appropriate contractual safeguards. This policy is not itself a transfer agreement. Contact us for information about safeguards relevant to your information.

7. Retention and security

We retain information for as long as reasonably needed for the stated purposes, including providing your license, resolving disputes, preventing abuse and complying with applicable retention obligations. Temporary tool files are subject to the relevant tool's lifecycle; account deletion does not necessarily erase records we must lawfully retain. Access restrictions and other technical and organizational measures help protect information, but no service can guarantee absolute security.

8. Your rights

Depending on your location and applicable law, you may request access, correction, deletion, restriction, portability, objection, withdrawal of consent or information about disclosures. We may verify identity proportionately and explain any lawful exception. You may complain to the competent data-protection authority. We do not discriminate for exercising applicable privacy rights. Türkiye residents can also read our KVKK notice. California residents may use the privacy-choice link above for applicable sale/sharing choices; the rights and definitions of the applicable law govern.

9. Other websites, children and changes

Third-party checkout, Shopify stores and linked services have their own notices. Merchants using Scale Theme remain responsible for their own storefront privacy practices. Our services are intended for business users and are not directed to children. We update this notice when practices change and provide additional notice when required. Contact support@scaletheme.com for privacy requests.