Digiful only collects the minimum data required to operate properly:

• User emails used solely to send digital product links after purchase.
• Merchant products tagged 'digiful' used to associate them with downloadable content.
• Manually provided S3 credentials encrypted and only decrypted for API calls.
• Download statistics shown only to the merchant, not shared or sold.
• Other Shopify admin data only used as needed for core app functionality. We do not sell your data, use it for AI training, or share it externally. All data stays within digiful and is handled securely.