Privacy Policy

Effective Date: August 13, 2026

At Infiopia (“we”, “us”, or “our”), we respect your privacy and are committed to protecting the information we process when you use our Shopify applications and related services (collectively, the “Services”).

This Privacy Policy explains what information we collect, how we use and protect it, when we share it with third parties, and the choices available to you.

By installing or using our Services, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

We collect only the information reasonably necessary to provide, maintain, secure, and improve our Services.

A. Shopify Store Information

When you install and use our Apps, we may collect information associated with your Shopify store, including:

• Shopify store name and domain
• Shopify store identifier
• Store owner’s email address or account contact information
• Product information required to provide the App’s functionality
• Product images and image URLs
• Product titles, descriptions, and other product information used to generate relevant alt text
• App installation and configuration information
• Subscription and credit information associated with your use of the Services

We access Shopify data through Shopify’s APIs and only request the permissions reasonably necessary for the functionality of the applicable App.

B. Information You Provide

If you contact us for support, we may collect the information you voluntarily provide, including:

• Name
• Email address
• Store information
• Screenshots
• Messages and support requests
• Other information you choose to provide

C. Usage and Technical Information

We may automatically collect limited technical and usage information when you use our Services, including:

• IP address
• Browser type and version
• Device and operating system information
• App usage information
• Pages or features accessed
• Request and processing logs
• Error and diagnostic information
• Date and time of activity

We use this information primarily for security, troubleshooting, service reliability, analytics, and product improvement.

D. Cookies and Similar Technologies

We may use cookies, local storage, pixels, and similar technologies that are necessary to operate our Services, maintain sessions, remember preferences, improve security, and understand how our Services are used.

We may also use analytics technologies, including Google Analytics 4 (GA4), in the future to understand how users interact with our Services, analyze usage patterns, monitor performance, and improve our Apps.

Because GA4 is currently planned but may not be enabled in all versions or implementations of our Services, the specific analytics technologies used may vary over time.

Where required by applicable law, we will obtain appropriate consent before using non-essential cookies or similar tracking technologies.

F. Billing and Payment Information

Paid features may include subscription plans and one-time credit purchases.

Payments for our Shopify Apps are generally processed through Shopify’s billing system. We may receive information necessary to identify your subscription, billing status, plan, transaction status, and credit balance.

We do not need to receive or store your full credit card number when payment is processed through Shopify or another authorized payment provider.

2. How We Use Your Information

We may use the information we collect to:

Service Delivery

• Install, operate, and maintain our Apps
• Connect our Apps with your Shopify store
• Access and process product information and images required for the requested functionality
• Generate AI-powered alt text and other requested content
• Process bulk image generation or optimization requests
• Maintain your account, subscription, and credit balance

Customer Support

• Respond to support requests
• Troubleshoot technical issues
• Investigate errors and service interruptions

Service Improvement and Analytics

• Monitor performance and reliability
• Analyze usage patterns and trends
• Understand how users interact with our Apps
• Identify technical issues and improve system performance
• Improve our Apps, features, and user experience

We may use analytics services such as Google Analytics 4 (GA4) for these purposes if and when such services are enabled.

Communications

• Send service-related notifications
• Send security alerts
• Communicate important changes to the Services
• Respond to support and account-related requests

We may send marketing communications only where permitted by applicable law and, where required, with your consent.

Legal and Compliance

• Comply with applicable laws and regulations
• Respond to lawful requests from government authorities
• Enforce our Terms and Conditions
• Protect our rights, property, and users

3. AI Processing

Some of our Services use third-party artificial intelligence technologies to analyze images and generate content.

When you use an AI-powered feature, relevant information, such as product images, product information, keywords, prompts, or other inputs necessary for the requested operation, may be transmitted to our authorized AI service providers for processing.

We use such providers only as reasonably necessary to provide the requested functionality and require them to handle information in accordance with applicable contractual and security requirements.

We do not use your Shopify product images or store data to train our own AI models unless we separately disclose this practice and obtain any consent required by applicable law.

AI-generated content may not always be completely accurate. You are responsible for reviewing generated alt text and other AI-generated content before publishing or relying on it.

4. How We Share Information

We do not sell or rent your personal information.

We may share information with the following categories of recipients when reasonably necessary:

Shopify

We access and process Shopify data through Shopify’s APIs and integrations to provide our Services. Our use of Shopify data is subject to Shopify’s applicable terms, requirements, and developer policies.

AI Service Providers

may use third-party AI providers to process images and generate alt text or other AI-generated content.

Only information reasonably necessary for the requested AI operation is transmitted to these providers.

Hosting and Infrastructure Providers

We may use third-party cloud hosting, database, storage, logging, security, and infrastructure providers to operate our Services.

Analytics Providers

We may use analytics and monitoring providers, including Google Analytics 4 (GA4), to understand App usage, monitor performance, identify technical issues, and improve our Services.

GA4 may collect information such as usage and interaction data, device and browser information, approximate geographic information, IP address or other technical identifiers, referral information, and date and time of activity, depending on the configuration of the analytics service.

GA4 may be enabled in the future as our Services develop. If enabled, Google may process information collected through the service in accordance with its own terms and privacy policies.

If you uninstall our Apps, we will cease processing your data and delete stored information within a reasonable timeframe, unless retention is required by law.

Customer Support Providers

We may use third-party services to manage support requests, communications, and technical assistance.

Payment and Billing Providers

Subscription and payment-related information may be processed by Shopify or other authorized payment providers.

Legal Requirements

We may disclose information where reasonably necessary to:

Comply with applicable law or legal process Respond to valid governmental or regulatory requests Protect the rights, safety, or property of Infiopia, our users, or others Detect or prevent fraud, abuse, or security threats.

Service providers that process information on our behalf are permitted to use such information only as necessary to provide their services to us, subject to applicable contractual obligations.

5. Shopify Customer Data

Our Apps are designed to minimize access to Shopify customer and order information.

Unless a particular App specifically requires such information to provide its stated functionality, we do not intentionally access or process Shopify customer personal information such as customer names, email addresses, phone numbers, or shipping addresses.

If an App requires access to customer information in the future, we will request only the permissions reasonably necessary for that functionality and process the information in accordance with this Privacy Policy and applicable law.

6. Data Retention

We retain information only for as long as reasonably necessary to provide the Services, fulfill the purposes described in this Privacy Policy, resolve disputes, enforce our agreements, maintain security, and comply with legal obligations.

Shopify Store Data

We generally retain necessary App-related store data while your App remains installed and active.

Product Images and AI Processing Data

Product images and related information may be processed temporarily or stored as necessary to provide the requested functionality.

Where information is no longer necessary for providing the Services, we will delete or anonymize it within a reasonable period, subject to technical, legal, security, and operational requirements.

Analytics and Usage Data

Analytics and usage data may be retained for a reasonable period necessary for service analysis, security, performance monitoring, and product improvement.

If analytics services such as GA4 are enabled, retention periods may also be subject to the configuration and retention policies of the applicable analytics provider.

Logs and Technical Data

Technical logs may be retained for a limited period for security, troubleshooting, fraud prevention, and service reliability.

Billing Records

Certain billing and transaction records may be retained for accounting, tax, fraud prevention, dispute resolution, or legal compliance purposes.

7. Uninstallation and Data Deletion

When you uninstall an App, we will stop accessing your Shopify store through the App, except where necessary to comply with legal obligations, resolve disputes, prevent fraud or abuse, or otherwise fulfill legitimate operational requirements.

We will delete or anonymize personal information and App data that is no longer reasonably necessary within a reasonable period following uninstallation, subject to applicable legal and contractual retention requirements.

Shopify may also send data deletion or redaction requests to us in accordance with its platform requirements. We will process such requests as required by applicable law and Shopify’s applicable requirements.

You may also contact us at [email protected] to request deletion of personal information associated with your use of the Services.

8. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include:

• HTTPS/TLS encryption for data transmission
• Access controls and authentication
• Restricted access to production systems
• Monitoring and logging
• Secure cloud infrastructure
• Regular security and software maintenance

However, no method of transmission or electronic storage is completely secure. We cannot guarantee absolute security of your information.

9. International Data Transfers

We and our service providers may process or store information in countries other than the country where you or your Shopify store are located.

These countries may have data protection laws that differ from those in your jurisdiction.

Where required by applicable law, we will use appropriate safeguards for international transfers of personal information.

10. Your Privacy Rights

Depending on your location and applicable law, you may have rights regarding your personal information, including:

• The right to access personal information we hold about you
• The right to request correction of inaccurate information
• The right to request deletion of personal information
• The right to restrict or object to certain processing
• The right to request data portability where applicable
• The right to withdraw consent where processing is based on consent
• The right to lodge a complaint with a relevant data protection authority

To exercise your rights, contact us at:

Email: [email protected]

We may need to verify your identity before completing certain requests.

11. California Privacy Rights

If you are a California resident, applicable California privacy laws may provide you with additional rights regarding your personal information.

Subject to applicable law, these rights may include the right to know about personal information collected, request deletion, request correction, and obtain information about certain disclosures.

We do not sell personal information or share personal information for cross-context behavioral advertising as those terms may be defined under applicable California privacy laws.

To submit a privacy request, contact us at:

Email: [email protected]

12. European Economic Area and UK Privacy Rights

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar data protection laws, you may have additional rights under applicable privacy legislation, including the right to access, correct, delete, restrict, object to, or port your personal information.

Where applicable, our legal bases for processing may include:

• Performing a contract with you
• Taking steps at your request before entering into a contract
• Complying with legal obligations
• Our legitimate interests in operating, securing, and improving our Services
• Your consent, where required

Where we rely on legitimate interests, we consider and balance those interests against your rights and freedoms.

13. Third-Party Links and Services

Our Services may contain links to third-party websites, applications, or services.

We are not responsible for the privacy practices, content, security, or policies of third-party services.

Third-party services, including Shopify, AI providers, payment providers, analytics services, and other integrations, may have their own privacy policies and terms.

We encourage and advise you to review the privacy policies of any third-party service you use.

14. Children’s Privacy

Our Services are intended for Shopify merchants and business users and are not directed to children.

We do not knowingly collect personal information directly from children.

If you believe that a child has provided personal information to us, please contact us at [email protected], and we will take appropriate steps to address the situation.

15. Data Controller and Contact Information

infiopiaindsadfinfiopiacccccfvcvssss

For questions, requests, or concerns regarding this Privacy Policy or our handling of personal information, please contact:

Infiopia

Email: [email protected]

If you are located in a jurisdiction that provides you with the right to contact a data protection authority regarding our processing of your personal information, you may also exercise that right.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, technology, business practices, legal requirements, or other circumstances.

When we make changes, we will update the “Effective Date” at the top of this Privacy Policy.

Where required by applicable law, we will provide additional notice of material changes.

We encourage you to review this Privacy Policy periodically.