# Terms of use · Easy AI Act Image Labels

> Terms of use for the Shopify app Easy AI Act Image Labels: service and limits, plans, trial, liability, data protection.

URL: https://easyaiactlabels.com/en/terms/

Legal

# Terms of use

Last updated: 30 September 2026

Last updated: 2026-09-30

This is a courtesy translation. The [German version](/de/nutzungsbedingungen/) is the legally binding one (Section 13 (4)).

## Section 1 Scope, definitions

1.  These terms apply to the use of the Shopify app “Easy AI Act Image Labels” (the app) including its theme app extension, the info pages and support, including the support chat in the app.
2.  The provider of the app is lakör GmbH & Co. KG, Am Kreuzgraben 5, 18146 Rostock, Germany (lakör). The contracting party is the owner of the Shopify store in which the app is installed (you).
3.  “Shopify entity” means the company of the Shopify group with which you have concluded your Shopify contract (for merchants in the EU usually Shopify International Limited, Dublin). “App Store” means the Shopify App Store operated by the Shopify entity.
4.  Deviating terms of yours do not apply, even if lakör does not expressly object to them.

## Section 2 Businesses only, relationship to Shopify

1.  The app is aimed exclusively at businesses within the meaning of Section 14 of the German Civil Code (BGB). Before installing, you check whether you are a business. Upon unconditional installation lakör may assume that you use the app for your commercial or independent professional activity.
2.  The app is provided through the App Store. The Shopify entity is not the provider of the app and not a party to this agreement. lakör alone is responsible for development, operation, content, support and marketing of the app; the Shopify entity is not liable for defects of the app.
3.  Content and services of the Shopify entity (App Store, admin, theme editor, interfaces, hosting of your store) are third-party content for lakör. lakör gives no warranty for their availability, accuracy or completeness. Your agreements with the Shopify entity govern your use of Shopify.

## Section 3 Conclusion of the agreement, data processing

1.  The presentation of the app in the App Store is an invitation to you to make an offer. By clicking the button that triggers the installation of the app you make an offer to conclude an agreement on the use of the app under these terms. lakör accepts the offer by successfully completing the installation.
2.  With the conclusion of the agreement you also enter into the data processing agreement in the annex to these terms with lakör. Subscribing to a plan (Section 7) is a further step that you approve in your Shopify admin; it is the prerequisite for the app scanning your images and showing labels in your store.
3.  These terms, the privacy policy and the annex are available at any time at ai-badge.lakoer.workers.dev/en/nutzungsbedingungen and /en/datenschutz and are shown to you as links when you first open the app.

## Section 4 Description of services and limits

1.  The app checks the original files of the images in your store, within the scope of your plan (Section 7), for machine-readable provenance data (C2PA manifests, IPTC and XMP fields). For images with data that indicates AI generation or AI modification, the app proposes a label.
2.  You decide for each image whether it is labelled and with which of the two notices (“AI GENERATED” or “AI MODIFIED”). You can add images without provenance data by hand and reverse any decision. Without your confirmation the app labels nothing, unless you turn on the automation under paragraph 2a. 2a. **Automation (opt-in).** You can expressly turn on automatic labelling in the app; it is included in the Pro and Unlimited plans (Section 7 (2)), off by default and can be turned off at any time. When you turn it on, the app shows you the number of open decisions it will set by the following fixed rule and sets them with your confirmation; after that it applies the rule to new images (regular check once a day, earlier after product changes): images with readable provenance data (C2PA or IPTC) are labelled, images without readable provenance data are closed without a label, images without a verifiable original stay open. Closing without a label is no statement about whether an image is AI-generated (paragraph 4). Every automatic decision is marked as such and can be individually reversed or changed by you. The responsibility under paragraph 5 stays with you even with automation on; images you know to be AI-generated you continue to label yourself.
3.  Confirmed images receive a visible label with the EU icon in the online store channel of your store. In English the app uses the official files of the European Commission; in other languages translations by lakör with the same meaning, which are not official files. You choose the language; a label that follows the visitor’s language is available in the Pro and Unlimited plans (Section 7 (2)); in the Basic plan the label appears in one fixed language of your choice. The label is inserted through a theme app extension that you turn on in the theme editor. It applies to the online store channel; other sales channels (for example marketplaces, social media, newsletters, headless storefronts) are not covered.
4.  **Limits of the check.** The app only finds provenance data that the creating tool wrote into the file. Many AI tools write no data, and data can be lost during export or editing. An image without data can therefore be AI-generated. The app makes no statement about whether an image without data is AI-generated or not. Conversely, data can stem from plain standard editing that requires no label.
5.  **No legal advice, no assumption of your obligations.** The app provides a technical label. Whether and which of your images must be labelled under Article 50 (4) of Regulation (EU) 2024/1689 or other provisions, which legal provisions apply to you and whether your labelling is sufficient is for you alone to check and decide, or to have checked by a lawyer. Proposals, sortings and notices of the app are orientation aids, not legal information. The app does not fulfil your obligations and does not guarantee legal compliance. You remain responsible for your store and your images.
6.  The app is not an AI system. The check is a deterministic evaluation of file metadata.
7.  The display of the label depends on your theme, on the content delivery network of the Shopify entity and on its interfaces. lakör does not owe a particular display in every theme and no adaptation to themes that load images in unusual ways.
8.  **Support chat.** lakör provides a support chat in the app and also answers requests by e-mail at [ai-act-labels@lakoer.de](mailto:ai-act-labels@lakoer.de). Support is provided on a best-effort basis; lakör does not owe a particular response time beyond what lakör states as a target on the app’s support page. First answers in the chat are generated by an AI service (Anthropic, see the privacy policy and annex item 7) from knowledge about the app and the technical state of your installation. Such answers are implementation help and general information, not legal advice and no assurance; Section 4 (4) and (5) apply to them too. lakör may pass requests from the chat on to lakör staff. lakör may limit the number of messages per store and day and may temporarily switch off the chat in case of abuse, malfunctions or for technical reasons; availability by e-mail remains. Never enter passwords or other credentials in the chat; lakör never asks for them.

## Section 5 Right of use

1.  lakör grants you, for the duration of the installation, a simple, non-transferable, non-sublicensable right to use the app for your store.
2.  The labelling icons come from the European Commission’s Code of Practice and may be used without attribution. All other rights in the app remain with lakör.
3.  You may not reverse engineer, decompile, pass on to third parties or use the app for stores other than the one in which it is installed, unless mandatory law permits otherwise.

## Section 6 Your cooperation

1.  You check every proposal of the app before you confirm it. If you turn on the automation, you regularly check the automatically set labels in the app and reverse unsuitable ones.
2.  After activation you check whether the label is displayed correctly in your theme, in particular after theme changes, theme updates and the installation of other apps that change images or layout. The app shows you notices about this; the control lies with you.
3.  You keep your Shopify credentials secret and ensure that only authorised persons operate the app in your admin.
4.  You do not use the app to deceive third parties, in particular not to present real photographs as AI-generated or AI-generated images as real.
5.  You ensure a proper backup of your store data. The app changes no image files, products or themes; it only writes two app-owned settings fields into your store.
6.  **Read access and collaborator access.** Both happen only at your express request in the support chat and can be withdrawn at any time. (a) If you allow read access for a request, lakör may, for seven days and through the app’s access token, read products, files and theme settings of your store to follow the case; no further permissions arise, and even then lakör never writes to your theme through the app. (b) If lakör is to make a fix in your theme, this happens exclusively through collaborator access under the rules of the Shopify entity: you provide your collaborator request code for this, lakör submits the access request, and you approve it in your Shopify admin and define the permissions there; lakör requests only the permission for themes. lakör agrees work through this access with you in advance; you can revoke the access at any time in your Shopify admin. Withdrawing the code in the chat only ends the access request, not access already granted. lakör never needs your password for this. Section 9 applies to changes lakör makes in your theme at your request; you check the result under paragraph 2.

## Section 7 Fees, plans, free trial, term

1.  For the scan of your images and for the label in your store (the visible display through the app embed) you need a plan that you subscribe to in the app: Basic, Pro or Unlimited. Without an active plan you can install the app, see the number of images in your store and a plan recommendation, and edit settings and decisions about images already scanned; they take effect only once a plan is active. Without a plan the app does not scan, shows no label and runs no automation. Development stores (Shopify development stores) use the app without a plan free of charge with the scope of the Unlimited plan; if you subscribe to a plan in a development store as a test subscription, the scope of that plan applies.
2.  The plans differ in image quota and features: Basic covers 100 images, one fixed label language and no automation. Pro covers 1,000 images, the label in the visitor’s language and the automation. Unlimited covers all images without limit, the label in the visitor’s language and the automation. The quota covers the oldest images currently present in your store (files in your media library as well as collection and blog images) by upload date; the app does not scan images beyond that and shows no label for them, even if you have already labelled them; deleted images free their place at the next scan. For images outside your quota the disclosure under Section 4 (5) remains your task alone. The applicable prices, monthly or yearly, are stated in the App Store and on the Plan page of the app.
3.  Billing runs exclusively through the billing system of the Shopify entity in the billing currency of your Shopify account (euro or US dollar). You approve every subscription and every change on the approval page of the Shopify entity; lakör receives no payment data. The amounts appear on your Shopify invoice.
4.  When you first subscribe to a plan, the first seven days are free (free trial). The free trial is granted once per store, for the plan you start with; not again after uninstalling and reinstalling. If you switch to another plan during the free trial, the remaining trial days continue for the new plan; a new free trial does not begin. If the plan ends within the free trial, no costs arise; otherwise billing starts at the end of the free trial.
5.  The monthly plan renews for a billing period of 30 days at a time, the yearly plan for one year at a time, unless you cancel. You cancel at any time in the app or by uninstalling the app; the cancellation takes effect at the end of the current billing period. Periods already paid are not refunded pro rata upon your cancellation; on the yearly plan the paid year runs to its end. After the plan ends, the app continues to show the label for seven days in the scope last subscribed (grace period) and then hides it; new scans are no longer possible from the end of the plan. If your store is paused at the Shopify entity, the app charges nothing; the label stays visible in the scope last subscribed, scan and automation rest. Your decisions remain stored in all cases until you uninstall the app.
6.  You can switch between the Basic, Pro and Unlimited plans and between monthly and yearly plans at any time in the app. The Shopify entity bills the switch pro rata or schedules the new subscription for the end of the current period; the approval page of the Shopify entity shows you the details before you confirm. A larger plan applies upon its approval; images that thereby newly fall into your quota are scanned by the app at the next run. A smaller plan applies from the time it takes effect: for images that are then outside the quota the app hides the label, in the Basic plan the automation rests and the label appears in one fixed language; your decisions remain stored.
7.  If your development store becomes a paid store, free use under paragraph 1 ends. lakör notifies you of this in the app and by e-mail to the address stored in your Shopify admin; from 14 days after the notice you need a plan under paragraph 1 for scan and label. A test subscription from the time as a development store ends at that point; no costs arise from it.
8.  lakör may change the prices. A price increase applies to you only once you expressly consent to it; the Shopify entity obtains the consent through its approval page before the new price is charged. If you do not consent, your plan continues at the previous price until the end of the current billing period and then ends. lakör notifies you at least 30 days in advance in the app and in text form.

## Section 8 Availability, changes to the app, discontinuation

1.  lakör strives for uninterrupted operation but does not owe a particular availability. lakör is not liable for disruptions, interruptions or outages attributable to maintenance work, to technical problems at the Shopify entity or at the hosting provider, or to changes to the Shopify interfaces, unless they are based on intent or gross negligence of lakör.
2.  If the lakör service fails, labels already set remain in your store; new checks and changes are then not possible.
3.  lakör may further develop the app, add features and change features, as far as this is reasonable for you and the purpose of the agreement (checking for provenance data, labelling upon your confirmation) is preserved. lakör announces material feature changes in the app.
4.  lakör may discontinue the app with three months’ notice. lakör announces the discontinuation in the app and in text form to the store e-mail address stored in the Shopify admin and points out that with the discontinuation the labels disappear from your store and you must continue the labelling by other means. Periods already paid that extend beyond the time of discontinuation are refunded by lakör pro rata.

## Section 9 Warranty and liability

1.  As far as you use the app free of charge (without a subscribed plan, during the free trial or as a development store), lakör is liable for material defects and defects of title only if lakör fraudulently concealed a defect or assumed a guarantee; as far as legally permissible, the provisions on gratuitous provision (Sections 521, 599 BGB) apply accordingly. For paid use the statutory provisions apply with the following provisos: lakör owes the function described in Section 4 within the scope of the subscribed plan (Section 7 (2)); the detection of all AI images (Section 4 (4)) and the legal sufficiency of your labelling (Section 4 (5)) are not an owed quality. Strict liability for defects already present at the conclusion of the agreement (Section 536a (1) BGB) is excluded.
2.  lakör is liable without limitation for damage based on an intentional or grossly negligent breach of duty by lakör, its legal representatives or vicarious agents, for damage arising from injury to life, body or health, and under the German Product Liability Act.
3.  Otherwise lakör is liable in cases of slight negligence only if an essential contractual duty has been breached. Essential contractual duties are duties whose fulfilment makes the proper performance of the agreement possible in the first place and on whose observance you may regularly rely. In that case liability is limited to the typical, foreseeable damage.
4.  The responsibility for which images are labelled and whether your labelling meets legal requirements lies with you under Section 4. Disadvantages arising from the fact that images without provenance data were not proposed, that you confirmed or rejected a proposal, that the automation you turned on labelled an image by the rule in Section 4 (2a) or closed it without a label, or that a label is not or incorrectly displayed in your theme, are not damage for which lakör is responsible, unless paragraph 2 applies.
5.  In case of data loss lakör is liable only to the extent that would have been necessary for recovery had you backed up your data properly.

## Section 10 Data protection

1.  Which data the app reads, writes and stores is set out in the privacy policy at /en/datenschutz.
2.  As far as lakör processes data from your store on your behalf, the data processing agreement in the annex applies.

## Section 11 Term and termination

1.  The agreement begins with the installation and runs for an indefinite period. You can end it at any time without notice by uninstalling the app in your Shopify admin. A subscribed plan ends under Section 7 (5) and (7); without an active plan the agreement continues with the scope under Section 7 (1). lakör may end it under Section 8 (4) or for good cause, in particular in case of abuse under Section 6 (4) or of violations of the requirements of the Shopify entity.
2.  With the uninstall the Shopify entity withdraws the app’s access. The app-owned settings fields and with them the labels disappear from your store. Your images, products and theme remain unchanged because the app never wrote there.
3.  lakör deletes the data of your store after the uninstall in accordance with the privacy policy and the annex.
4.  If your contract with the Shopify entity ends, this agreement ends when the app’s access ceases.

## Section 12 Changes to these terms

1.  lakör may change these terms if this is necessary because of (a) changes in the law or in case law, (b) changes to the requirements or interfaces of the Shopify entity, (c) new or changed features of the app that do not materially change the purpose of the agreement, or (d) to close gaps or remove ambiguities.
2.  Changes that are not material are announced by lakör at least four weeks before they take effect, in the app and in text form to the store e-mail address stored in the Shopify admin. You can object within four weeks of receipt of the announcement. If you do not object, the changed terms apply from the stated date; lakör points out this consequence and your right to object in the announcement. If you object, the previous terms continue to apply; lakör may then end the agreement with four weeks’ notice.
3.  Material changes, in particular an increase of the fee (Section 7 (8)), changes to the term, the nature of the service or the purpose of the agreement, take effect only if you expressly consent to them, for example by confirming in the app. Without consent the previous terms continue to apply.

## Section 13 Final provisions

1.  The law of the Federal Republic of Germany applies, excluding the UN Convention on Contracts for the International Sale of Goods.
2.  If you are a merchant (Kaufmann), a legal entity under public law or a special fund under public law, the courts in Rostock have exclusive jurisdiction. If your registered office is outside Germany, the courts in Rostock, Germany, likewise have exclusive jurisdiction.
3.  Should a provision be invalid, the remainder of the agreement remains valid.
4.  These terms are available in German and English. In case of discrepancies the German version prevails.

* * *

# Annex: Data processing agreement (Art. 28 GDPR)

## 1\. Parties, conclusion, duration

This agreement is concluded between you as controller and lakör as processor upon the installation of the app (Section 3 (2) of the Terms of Use). It applies for the duration of the installation. Uninstalling the app also ends this agreement.

## 2\. Subject matter, nature and purpose of the processing

Reading image files, image metadata, product titles and theme settings of your store through the Shopify API, evaluating the image files for provenance data, storing the results and your decisions, writing two app-owned settings fields into your store. The purpose is support with the visible labelling of AI-generated images under Section 4 of the Terms of Use. If you use the support chat, the processing additionally covers the storage of your support requests, the transmission of message text and technical app state to the AI service for answering and, upon your consent, read access to your store and the storage of the collaborator request code (Section 4 (8), Section 6 (6)).

## 3\. Type of data and categories of data subjects

-   Types of data: store address, access token, file names, image URLs, image dimensions, metadata from image files (possibly including names of photographers, authors or signers), product titles, your decisions, log data with truncated IP address; when using the support chat additionally message texts, technical app state and, only upon your consent, the collaborator request code stored encrypted.
-   Data subjects: you and your staff as users of the app; persons whose names appear in image metadata. No customers of your store, no store visitors.
-   For data that lakör processes for its own purposes to perform the agreement with you (store address as contract identifier, log for security), lakör is itself the controller; details in the privacy policy.

## 4\. Instructions

lakör processes the data only on your documented instructions. Instructions are the Terms of Use, this agreement and your operation of the app (subscribing to a plan, starting a scan, confirming images, changing settings, uninstalling). If lakör considers an instruction unlawful, lakör informs you without delay.

## 5\. Confidentiality

All persons at lakör involved in the processing are bound to confidentiality.

## 6\. Technical and organisational measures

-   Access to production data only through personal accounts at the hosting provider with two-factor authentication.
-   Secrets (client secret, webhook addresses) exclusively as encrypted platform secrets, never in the source code.
-   Access tokens encrypted in the database (AES-GCM, key only in the worker environment).
-   Every request to the app is verified against a session token signed by Shopify; webhooks are verified by HMAC before any processing.
-   Write access to your store is restricted in the code to a verified list; an automatic check run before every deployment enforces this.
-   Image data is processed in memory only and not stored.
-   Logging of security-relevant events for 90 days with truncated IP address.
-   Transport encryption (TLS) for all connections.

## 7\. Sub-processors

You consent to the engagement of the following sub-processors:

Company

Service

Location

Basis for third-country transfer

Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA

Hosting of the app (Workers, KV, Queues, Durable Objects)

EU and USA, edge worldwide

EU-US Data Privacy Framework (Art. 45 GDPR), EU Standard Contractual Clauses (Art. 46 GDPR)

Slack Technologies, LLC (Salesforce), 415 Mission St, San Francisco, CA 94105, USA

Internal operational alerts (store address, event text); handover of support requests to lakör (store address, message text or excerpt, technical app state, upon your consent the collaborator request code) in a private channel

USA

EU-US Data Privacy Framework (Art. 45 GDPR)

Anthropic, PBC, 548 Market St, San Francisco, CA 94104, USA (contracting entity for the EU: Anthropic Ireland Limited, Dublin, Ireland)

Answering support requests through an AI model (message text, conversation history of the request, technical app state; no store address, no credentials, no images); no use for training

USA

EU Standard Contractual Clauses (Art. 46 GDPR) as part of Anthropic’s Data Processing Addendum

Resend, Inc., 2261 Market Street, San Francisco, CA 94114, USA

Sending e-mail notices about your plan (store e-mail address, subject, text)

USA

EU Standard Contractual Clauses (Art. 46 GDPR)

lakör announces new or changed sub-processors at least 30 days in advance in the app and in text form. You can object within 14 days of receipt for an important data protection reason; if no agreement is reached, you can end the agreement by uninstalling.

## 8\. Assistance, notification of breaches

lakör assists you with the information available in the app with requests of data subjects for access, rectification and erasure and with your obligations under Art. 32 to 36 GDPR. lakör notifies you of personal data breaches without undue delay, at the latest within 48 hours of becoming aware, to the store e-mail address stored in the Shopify admin.

## 9\. Deletion and return

After the uninstall lakör deletes all data of your store, triggered by the deletion command of the Shopify entity (`shop/redact`, 48 hours after uninstall), at the latest 30 days after the uninstall, unless a statutory retention obligation exists. There is no return because the original data remains in your store. Log data expires at the latest 90 days after it arises.

## 10\. Evidence and audits

On request lakör provides you with the information necessary to demonstrate compliance with this agreement. On-site audits are possible after announcement with reasonable notice during usual business hours; lakör may instead present current audit reports or certifications of the sub-processors.

_This is a courtesy translation. The German version is the binding one: [Deutsche Fassung](/de/nutzungsbedingungen/)._