HBN: Product Info Blocks Privacy Policy

Effective and last updated: July 15, 2026

This Privacy Policy explains how HBN Studio processes information when a Shopify merchant installs or uses HBN: Product Info Blocks (the "App"), visits an App webpage, or contacts support.

1. Information we process

• Shop domain, installation identifiers, granted scopes, and App installation status.
• OAuth and session information needed to authenticate the merchant, including access tokens and session expiration information.
• When supplied by Shopify, limited merchant staff information such as Shopify user ID, name, email address, locale, account-owner status, and collaborator status.
• Subscription status and plan handles used to provide available features.
• Merchant-configured headings, block titles, rich text, links, icons, schedules, product or collection targeting, country targeting, translations, and display settings.
• Technical and security logs that can include request time, URL, IP address, user agent, and response status.
• Information a merchant chooses to submit through the support center.

2. Storefront visitors

The App renders merchant-configured product information through a Shopify theme app extension. It does not request Shopify customer or order records and does not intentionally collect personal information from storefront visitors for App functionality.

3. How we use information

• Authenticate merchants and maintain secure sessions.
• Save and publish product information configuration.
• Determine available subscription features.
• Operate, troubleshoot, secure, and improve the App.
• Respond to support and privacy requests.
• Comply with applicable law and Shopify requirements.

4. Storage and service providers

Shopify provides installation, authentication, billing, metafields, and theme-extension infrastructure. Merchant block configuration is stored in Shopify app-owned metafields. Vercel hosts the App, Neon provides PostgreSQL-compatible storage for App sessions and operational data, and tawk.to provides the support center. These providers process information under their own terms and privacy commitments.

We do not sell personal information or use merchant or visitor information for behavioral advertising.

5. Retention and deletion

We retain sessions and configuration only as long as reasonably needed to provide, secure, and support the App. Uninstall and verified Shopify privacy webhooks are used to delete applicable App data. Limited copies can remain temporarily in encrypted backups or security logs until the provider's retention cycle ends, or longer where required by law.

6. Security and international processing

We use reasonable administrative, technical, and organizational safeguards, including HTTPS, managed infrastructure, access controls, secret management, and development/production separation. Providers can process information in countries other than the merchant's country, subject to applicable contractual and legal safeguards. No system can be guaranteed completely secure.

7. Privacy rights

Depending on location, a person can have rights to request access, correction, deletion, restriction, portability, or objection. Merchants can contact us through the support center. Storefront visitors should normally contact the Shopify merchant first so the merchant or Shopify can submit the appropriate verified request.

8. Children's privacy

The App is a business service for Shopify merchants and is not directed to children. We do not knowingly collect children's personal information through the App.

9. Changes to this policy

We may update this policy when the App, providers, or legal requirements change. The revised version will be posted here with an updated effective date.

10. Contact

For privacy questions or requests, contact HBN Studio through our support center. Include your shop domain and do not submit passwords, payment-card details, or other unnecessary sensitive information.