Saved Labels — Privacy Notice
Effective October 22, 2026
Penny & Rose Saved Labels
How this internal label-reference tool uses order information and Google Drive.
Penny & Rose operates Saved Labels for its own personalized-order production and reference retrieval. This notice covers the app's handling of that information. It is separate from the store's customer shopping policies.
Information the workflow uses
From Shopify: order numbers and identifiers; ordered product and variant identifiers; item quantities; and saved label properties such as personalization text, notes, paper choice, text sizes, selected scents and ratios, symbols, requested dates and proof preferences. Personalization can contain names, dates or other information a customer has entered. The label queries do not request payment-card details or customer shipping addresses.
From Google: the connected account's email address to check the intended owner; account storage-quota information during connection checks; and information about the selected folder and app-accessible files, including names, identifiers, ownership, permissions, file types, size, checksums and links. The app creates and downloads label PNGs and production-note files to store and verify the references.
Google access and purpose
The app requests https://www.googleapis.com/auth/drive.file. This allows access to files created through the app or explicitly selected or opened for use with it. The permission can allow viewing, creating, editing and deleting those app-accessible files; the current label workflow creates, verifies and retrieves files and does not automatically delete them.
The owner selects the existing SPECIAL OCCASIONS LABELS folder. The workflow uses Google data to verify the account and private destination, organize reference files by order, check uploaded or downloaded files, and provide the corresponding file links. It does not request unrestricted access to the entire Drive.
Storage and protection
Label PNGs and production notes are stored in the owner's selected Google Drive folder. Order snapshots, reconstructed references and verification records are also kept on the business's Windows computer. Render hosts the authenticated Shopify Admin app and stores its session, job and reference-index information, including the identifiers and private links needed to associate a file with an order.
Google authorization credentials are encrypted for the designated Windows account. Hosted credentials are kept in service configuration, outside the source repository. The app uses authenticated connections and checks file ownership and sharing. These measures reduce risk; they do not remove every risk associated with storing business information.
Who can access the information
The workflow is for authorized Penny & Rose operations. The current Drive destination is owner-only, and the app does not publish files or add sharing permissions. A Shopify app link does not itself grant access to a Drive file.
Shopify, Google and Render process information needed to provide their respective services. Authorized Penny & Rose operators may review references for production, support or troubleshooting. The app does not sell Google user data, use it for advertising, or send it to an AI model for training.
Penny & Rose Saved Labels' use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.
Retention and deletion
Saved references support production, reprints and order support. There is currently no automatic expiry or deletion schedule. Files remain until Penny & Rose removes them through an owner-controlled process; local exports and any retained backups require separate handling.
Contact kgollance@pennyandroseshop.com to request review, correction or deletion of saved-label information. Penny & Rose will assess the affected order records, Drive files and local copies and explain any records it needs to retain. Correcting a record does not silently replace the original purchased design.
Disconnecting Google
The Google account owner can revoke Saved Labels access through their Google Account's connected-app controls. Revocation stops the app from using that authorization once it is no longer valid. It does not automatically erase existing Drive files, local exports or hosted order-reference records. Contact Penny & Rose for separate deletion assistance.
Changes and questions
We will update this notice when the app's data practices change. If a change requires new Google access or a new use of Google data, we will disclose it and obtain the required authorization before using that access.
Contact: kgollance@pennyandroseshop.com.