Privacy Policy
Last updated 17 September 2026
Infus is a Shopify app operated by ULTRA SMOOTH STUDIO SRL (“we”, “us”), a company registered in Romania. This policy explains what information Infus handles when a merchant installs it on a Shopify store, why, and what rights merchants have.
What we collect
When you install Infus we receive and store, for your store only:
- Your store's myshopify.com domain and an API access token issued by Shopify, so the app can act on your behalf.
- The link to your Infus brand account: your Infus brand name and an access token for the Infus API. The token is held on our server and is never sent to your browser.
- A record of the campaigns you publish from this app: the title and the date.
- Basic technical logs (request times, errors) needed to run and support the service.
We do not collect or store customer data. Infus never reads customer names, emails, addresses, orders or payment details. The app requests a single Shopify permission,read_products, and uses it only to list your products so that a campaign brief can be pre-filled from one. Product information is read when you open the campaign form and is not stored.
Why we use it
- To connect your store to your Infus brand account and keep that connection working.
- To publish the campaigns you write here to Infus, and to show you the proposals creators send back.
- To support you if something goes wrong.
Campaigns you publish are visible to creators on Infus — that is the point of publishing them. They contain what you write in the brief and nothing else from your store.
We do not sell, rent or share store data with third parties for their own purposes, and we do not use it for advertising.
Where it is stored
Infus runs on servers rented from Vultr (The Constant Company, LLC) located in New Jersey, United States. Data is transferred from Shopify to those servers over encrypted connections and stored in an encrypted-at-rest database with access restricted to the operator. Shopify itself remains the system of record for your products, products and campaigns.
How long we keep it
- While Infus is installed: for as long as the offers exist.
- When you uninstall Infus: your Shopify access token is deleted immediately, and the Infus token is revoked so the connection stops working. Shopify then sends a shop-redaction request 48 hours after uninstall, on which we delete all remaining data for your store.
- Campaigns already published stay on Infus, because they belong to your Infus brand account rather than to this app. You can manage or close them at infus.app.
- Technical logs are kept for at most 30 days.
Shopify privacy webhooks
Infus implements Shopify's mandatory privacy webhooks. Because we hold no customer data, customers/data_request and customers/redact return nothing to redact. shop/redactdeletes every record associated with the store.
Your rights
Merchants in the European Economic Area, the United Kingdom, Switzerland and other jurisdictions with data protection laws may ask us to access, correct, export or delete the data we hold about their store. Uninstalling the app achieves deletion automatically; for anything else, email us and we will respond within 30 days.
Changes
We will update this page when the policy changes and note the date at the top. Material changes are also announced inside the app.
Contact
ULTRA SMOOTH STUDIO SRL
Email: office@albustudio.com