Last updated 21 October 2026. This page covers this website, the plugins and the Shopify apps published by SD Software LLC. It is written to be read, not to be survived, and it says what actually happens rather than reserving every right we could think of.
SD Software LLC, a company registered in Yerevan, Armenia. We are the data controller for anything described here. Write to support@sdsoftware.io about any of it.
We do not add analytics, tracking pixels or advertising scripts to this website, and our own pages do not set cookies. The optional video player is described below.
The site loads web fonts from Google Fonts. Your browser requests the
font files from fonts.googleapis.com and
fonts.gstatic.com, which means Google sees that request and
the IP address it came from. We receive nothing from it.
The Codeep Voice demo uses a local preview image. YouTube does
not load until you press play or follow the YouTube link. Playing the
embedded video connects your browser to YouTube through
youtube-nocookie.com; YouTube receives your IP address and
playback requests. Its own privacy policy applies to that playback:
Google Privacy Policy.
Our host keeps ordinary server logs (IP address, time, the page asked for) for a short period, as any web server does. We do not analyse them and we do not join them to anything else.
The speed check at /check/ runs a real speech model in your browser, and to do that your browser downloads two things from outside this site: the runtime library from cdn.jsdelivr.net and the model and voice files from huggingface.co.
Both are downloads. The page has no form and nothing to fill in; the sentence it reads aloud is built into it. The timing result stays on your screen, and we do not learn that you ran it.
Our plugins do their work in the browser of the person using them, on their own machine. When you use a plugin's free way, your content (post text, product titles, descriptions) does not leave your site. Not to us, not to anyone. There is no usage counter, no "anonymous statistics" and no update check that quietly doubles as a ping.
The one outside request is the model file itself. The first time you use a voice or a language, the browser downloads that model from huggingface.co and caches it. That is a download: nothing about you or your content travels with it, beyond the ordinary fact of your browser having asked for a file.
Paid plugins are not on sale yet. The following describes the planned data flow for those products.
A key changes what leaves your site, and how depends on the product.
If you switch the plugin to its paid way, the work moves to our servers,
and then these things are sent to api.sdsoftware.io:
| Your licence key | so we can tell a paid request from anyone else's |
| The domain name of your site | a key is sold for one site, and this is how it is tied to yours |
| The target language and your word list | so the result is in the language you asked for |
| The text being translated | titles, short descriptions, descriptions |
The domain name of your site is personal data in some readings, so we say it plainly rather than bury it.
Our service passes the text on to the model provider through OpenRouter. Your key and your domain name are not passed on. The provider receives the text and nothing identifying you.
We do not keep the text. It is held in memory for as long as the request takes and is gone when the answer comes back. What we do keep against a key is a running count of words used, because the key has an allowance and we have to know where it stands.
The add-on makes speech on your own machine, like the free plugin, so no
text of your posts leaves your site. It does talk to our licence server
at sdsoftware.io: when you enter or activate the key, once a
week to check it (every day once a paid year is over), and when WordPress
looks for updates. These things are
sent:
| Your licence key | so we know which key is asking |
| The address of your site | a key covers a set number of sites, and this is how your site takes its place |
| The add-on's name and version | so we can tell whether a newer one exists |
| Whether the copy is production, staging, development or local | so a staging or local copy does not use up your key; not sent with update checks |
Nothing else: no text of your posts and nothing about your readers. We keep the list of sites a key is active on, because that is what the key's site limit counts.
The app opens inside your Shopify admin and does its work in your browser, on your own computer. A product photo is read from your store's Shopify CDN, its background is removed or its alt text is written on your machine, and the result goes from your browser straight back to your store. Your photos never reach our servers.
With the permissions you approve when you install it (products and files), the app reads and writes these things in your store, through Shopify's own Admin API:
| Product titles and product photos | so you can pick a photo to work on |
| New photo files | the finished image is saved to your Files and takes the original's place on the product, including on its variants |
| Alt text of photos | copied from the original to the new photo, or written when you ask for it |
| One metafield on the product | which photos are copies made by the app and which original each came from, so Restore original works |
All of this stays in your store. The app does not read customers, orders or anything else. It has no account of its own and no usage counter.
Our server at photos.sdsoftware.io only sends your browser
the app's own files, and receives the privacy notices Shopify sends to
every app (a customer asking for their data, or asking for it to be
deleted, and a store asking for its data to be deleted). We hold no data
about your store, your staff or your customers, so there is nothing to
hand over or erase; we confirm receipt and keep nothing. The AI models
are downloaded from huggingface.co,
exactly as with the plugins above.
If you uninstall the app, the photos it made stay in your Files: they are yours, and deleting them is up to you. Shopify's own privacy notice covers your store and admin: shopify.com/legal/privacy.
The app opens inside your Shopify admin and does its work in your browser, on your own computer. A product photo is read from your store's Shopify CDN, enlarged on your machine, and the result goes from your browser straight back to your store. Your photos never reach our servers.
With the permissions you approve when you install it (products and files), the app reads and writes these things in your store, through Shopify's own Admin API:
| Product titles and product photos | so you can pick a photo to work on |
| New photo files | the enlarged image is saved to your Files and takes the original's place on the product, including on its variants |
| Alt text of photos | copied from the original to the new photo |
| One metafield on the product | which photos are copies made by the app and which original each came from, so Restore original works |
All of this stays in your store. The app does not read customers, orders or anything else. It has no account of its own and no usage counter.
Our server at upscale.sdsoftware.io only sends your browser
the app's own files, and receives the privacy notices Shopify sends to
every app (a customer asking for their data, or asking for it to be
deleted, and a store asking for its data to be deleted). We hold no data
about your store, your staff or your customers, so there is nothing to
hand over or erase; we confirm receipt and keep nothing. The AI model is
downloaded from huggingface.co,
exactly as with the plugins above.
If you uninstall the app, the photos it made stay in your Files: they are yours, and deleting them is up to you. Shopify's own privacy notice covers your store and admin: shopify.com/legal/privacy.
Paid plugins are not on sale yet, and this website does not currently collect payment details. Before sales open, this page will name the payment provider, link to its privacy notice and explain which purchase details we receive. We do not collect or store card numbers.
If you write to us, we keep the message and your address for as long as it takes to answer and for a reasonable while afterwards, in case the thread continues. We do not add you to a mailing list; we do not have one.
A copy of what we hold about you, a correction, or its deletion. One email to support@sdsoftware.io is enough and we will not ask why. If deleting the record of a purchase would also invalidate a key you are still using, we will say so before doing it.
If you are in the EU or the UK and you think we have handled your data badly, you may complain to your national supervisory authority. We would rather you told us first.
Our products are tools for people who run websites. They are not aimed at children and we do not knowingly collect anything from them.
If this page changes in a way that matters, the date at the top changes with it. We will not quietly broaden what we collect; if we ever need to collect more, it will be said here in the same plain words.