Privacy Policy

Influxr ("the App") provides creator review management and display ("the Service") to merchants who use Shopify to power their stores. This Privacy Policy describes how personal information is collected, used, and shared when you install or use the App in connection with your Shopify-supported store.

Personal Information the App Collects

When you install the App, we are automatically able to access certain types of information from your Shopify account:

• Shop — Information about your store (name, domain, plan, timezone)
• Products — Information about your products (IDs, titles, handles, images) used for review requests and display
• Themes — Information about your store's active theme (for Theme App Extension delivery)

Additionally, we collect the following information once you have installed the App:

• Install and uninstall date and time
• Creator/influencer information you provide — names, email addresses, social media handles, follower tiers, and niches
• Review content — review titles, bodies, star ratings, and uploaded media (photos and videos)
• Review request data — product details, personalised messages, tokens, and delivery status
• Email template content you create or customise
• Activity logs — records of actions taken within the app (e.g. review request sent, review approved)
• Display settings — layout preferences, brand colour, and feature toggles

We collect personal information directly from you through the App's admin interface, from creators through the review submission form, through your Shopify account, and using the following technologies:

• Email tracking pixels — A 1x1 transparent image is included in review request emails to track when the email is opened.
• Unique tokens — Each review request generates a unique token used to identify the submission and track its status.
• Log files — Server logs track actions and collect data including IP address, browser type, referring/exit pages, and timestamps.

How Do We Use Your Personal Information?

We use the personal information we collect from you and your creators in order to provide the Service and to operate the App. Specifically:

• To send review request emails to creators on your behalf
• To provide a submission form for creators to write and submit reviews
• To upload and store review media (photos and videos) via Shopify's Files API
• To display approved reviews on your storefront product pages
• To track email open rates and review submission status
• To manage your creator database and activity history
• To send you transactional emails about your account (e.g. billing receipts from Shopify)

We do not sell your personal information or your creators' personal information to third parties.

Sharing Your Personal Information

We share your Personal Information with third parties only to help us provide our services:

• Shopify — We operate on the Shopify platform and share information as necessary to provide the App. Media files are uploaded to Shopify's CDN via the Files API.
• Fly.io — Our application infrastructure provider where your app data is hosted.
• Neon — Our managed Postgres database provider where your data is stored securely.
• Resend — Our email delivery provider used to send review request emails. Creator email addresses and email content are shared with Resend for delivery purposes only.

We may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

Creator Data

When you add creators to Influxr, you are responsible for ensuring you have the right to store and use their contact information. Creator email addresses are used solely to send review request emails on your behalf. Creators can contact us at any time to request access to or deletion of their personal information.

Review submissions (including text, ratings, and media) are stored in association with the creator who submitted them. When a creator submits a review, they consent to that review being displayed on your storefront if approved by you.

Behavioural Advertising

We do not use your personal information or your creators' personal information for targeted advertising purposes.

Your Rights

If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us using the information below.

Additionally, if you are a European resident, we note that we are processing your information in order to fulfil contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Australia and the United States.

Data Retention

When you install Influxr, we maintain your data (creators, reviews, requests, templates, and activity logs) for as long as you have the App installed. When you uninstall the App, all data is permanently deleted via cascade delete within seconds of receiving the uninstall webhook from Shopify.

Review media (photos and videos) uploaded to Shopify's CDN are managed by Shopify and subject to Shopify's data retention policies.

GDPR Data Requests

Influxr processes mandatory Shopify GDPR webhooks:

• Customer data request — We will provide a summary of any customer data we hold upon request.
• Customer data erasure — We will delete all data associated with a specific customer upon request.
• Shop data erasure — We will delete all store data within 30 days of a shop redact request.

Changes

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.