InfiniteBro privacy

Effective October 13, 2026 · Version 1.0

InfiniteBro is provided by BroFam LLC. This notice describes information used by InfiniteBro and its optional support service.

Storefront browsing

InfiniteBro adds automatic loading and browsing controls to Shopify collection and search pages. It loads subsequent results from your store's own storefront. The InfiniteBro app service does not ingest shopper profiles, customer or order records, search terms, or storefront browsing analytics. Shopify and hosting or network providers may receive ordinary request metadata through their services.

A shopper's browser tab may keep a browsing hint containing the results URL, filters, search and sorting context, layout, position and timestamp. InfiniteBro accepts a matching hint for less than twenty minutes. This does not delete the hint after twenty minutes: it may remain in browser session storage until replaced or the browser session ends. Browsing can continue when that storage is unavailable.

Merchant information

We use shop and installation identifiers, installation status, granted permissions, minimal plan and access information, and service records needed to manage requests, background work, retries and cleanup. InfiniteBro requires no product, order or customer Admin API permissions.

After store-owner authorization, we store expiring Shopify access and refresh credentials encrypted and tied to the installation. We check Shopify staff identity to authorize access without storing a staff profile. A hashed identifier used to match support sessions can persist. Shopify hosts plan selection and approval; InfiniteBro verifies access and keeps the limited plan information needed to operate the app.

Optional support

You can use HelpBro for optional in-app support, including automated replies. The support connection receives your shop domain, opaque merchant and installation identifiers, and limited app, route and authorization context. Its signed context is valid for five minutes and contains no raw staff ID, name, email address or Shopify access token.

Support messages include information you choose to provide. HelpBro and the connected support mailbox handle those messages separately from InfiniteBro's installation records. Please do not send passwords, access or refresh tokens, or unrelated customer records.

We retain support information while needed to address requests, operate support and meet applicable obligations. BroFam reviews whether continued retention is needed when handling requests and reviewing support records. The current chat route has a configured thirty-day transcript expiry; this is not a promise that all transcripts, summaries, cases, emails or provider copies are deleted after thirty days.

Service providers

Amazon Web Services hosts InfiniteBro's application, storage and operational services. Google Workspace hosts the support mailbox. Optional HelpBro automated assistance uses OpenAI to process messages and the context needed to generate replies. Shopify handles installation, authentication, storefront requests and plan approval through its services. These providers have separate processing and recovery controls; the app's expiry settings do not establish their retention or deletion timing.

Retention and removal

We retain active installation records and encrypted credentials while needed to provide installation and access services. On ordinary retirement, credentials, plan information and granted permissions are removed from the installation state; a minimal retired identity has a configured seven-day expiry. Verified shop redaction removes the installation state record.

Temporary service records have their own expiry controls. Application diagnostic logs are configured for fourteen days and exclude Shopify tokens and raw webhook bodies. Work and failure queues have seven-day message retention; completed messages may be removed earlier. Expiry-based storage removal is asynchronous. Backups and provider recovery copies have separate handling, including enabled point-in-time recovery, so expiry does not mean every copy disappears at that instant.

We verify Shopify compliance requests before processing them. InfiniteBro holds no customer records in its app storage to return for customer-data requests. Verified uninstall and shop-redaction requests are recorded for cleanup, and cleanup checks the installation's authority before removing its records. Provider outages or failed cleanup can leave a request pending or escalated for operator review. Removing an installation record does not by itself remove separate support records.

Contact and privacy requests

Contact support@helpbro.app or use the BroFam contact form for support or to request access, correction or deletion of relevant information. BroFam responds to these requests. We verify your authority and identify the applicable installation and support records before fulfilling a request. If handling is incomplete, the request remains open for review.