InHub Privacy Policy
Last updated: August 12, 2026
Who we are
InHub is operated by Super Commerce LLC ("InHub", "we", "us"). For the store data and photographs you provide through InHub, Super Commerce LLC is the data controller. You can reach us at PO Box 1260, Alpine, NJ 07620, USA or info@inhubstudio.io.
What InHub is
InHub is a Shopify app with a companion iPhone app. Merchants photograph products; InHub generates product imagery and listing copy and publishes approved listings to the merchant's own Shopify store.
What we collect
- Product photographs you take or select in the mobile app. They are uploaded to our servers to generate listing imagery and copy, and are associated with your store.
- Store data needed to run the service: your shop domain, store name, store email, currency, product catalog metadata (types, options, pricing patterns), and the listings InHub creates for you.
- Device information for paired phones: device model, OS version, an app-generated pairing identifier, the device name you choose, and, if you allow notifications, a push notification token. This exists so you can see and revoke paired devices from the Shopify admin, and so your phone can be told when finished work is ready.
- Billing records for plans and credit purchases, processed by Shopify. We never see or store payment card details.
Usage analytics and session recordings
The iPhone app records product usage events (which screens are used and which actions are taken, for example "a listing was published") through PostHog, our analytics provider, so we can see what works and fix what does not. These events describe how the app is used, never your customers, and they are not sold, shared for advertising, or used to track you across other apps or websites.
We also collect session recordings: periodic captures of the app screen as you use it, so we can see where the app confuses people and fix it. Everything you type is replaced with placeholders before a recording leaves your phone, and the pairing camera view is never captured. Product photographs ARE visible in recordings: what a merchant is looking at is usually the reason a screen confused them, so images are deliberately not masked. This means PostHog receives your product imagery alongside the providers named below. Recordings are used only to improve InHub, are never sold or shared for advertising, and are retained by PostHog on our behalf for a limited period before automatic deletion.
What we do not collect
- No customer (shopper) personal data from your store.
- No location data, contacts, or browsing history.
- No advertising identifiers, and no data is sold or shared for advertising or tracking.
How photographs are used
Your photographs are sent to our AI providers, Google (Gemini) for product imagery and listing text and OpenAI for advertisement imagery, to produce results for your review. They are used only to provide this service to you, not to train models and not for any other purpose. Generated and source images are stored with Supabase in a private bucket, accessible only through short-lived signed links.
Who else processes your data
These are every service InHub sends your data to, and what each one receives. We do not sell your data, and none of these providers is permitted to use it for their own purposes.
| Processor | What it receives |
|---|---|
| Shopify | Your store, product and publishing data. InHub is a Shopify app and reads and writes your catalog with the permissions you granted at install. |
| Google (Gemini) | Your product photographs and product details, to generate product imagery and listing text. |
| OpenAI | Your product photographs and product details, to generate advertisement imagery. |
| Supabase | Your source and generated images, and the InHub database that holds your listings, ads, credits and settings. Hosted in the United States. |
| Railway | Hosting for InHub's servers. All processing above passes through them. |
| Expo | Push notification tokens and the title of the item a notification is about, so your phone can be told a shoot finished. |
| PostHog | Product analytics and session recordings from the mobile app, including the product photographs on screen. See the section above. Session recording is currently always on in the mobile app; email us to have your recordings excluded. |
| Sentry | Server error reports when something fails. These carry your store domain and the technical details of the failure, so we can find and fix it. They are configured not to include your photographs, your product text, request contents or credentials. |
International transfers
InHub's servers and our AI and analytics providers are located in the United States, so if you use InHub from outside the United States your data is transferred to and processed there. Where those transfers are subject to data-protection law, we rely on the providers' standard contractual clauses and equivalent safeguards.
How long we keep your data
We keep your data only as long as it is needed to provide InHub:
- Source photographs (the originals you take) are deleted 90 days after the listing they belong to reaches a final state (published, rejected, failed, or removed). A later re-shoot simply uploads again.
- Generated images and ads are kept for the life of your installation, so they stay available in the app, and are deleted when you delete your data or uninstall.
- Store and device records are kept for the life of your installation.
- Provider-cost records (which AI calls were made and what they cost, kept for billing reconciliation) are retained for the life of the install; the free-text notes in them are scrubbed when you delete your data or uninstall.
- Billing records are retained as required by law and by Shopify.
Your rights and how to delete your data
You can access, correct, export, restrict, or object to the processing of your data, and you can have it erased. To delete everything InHub holds for your store without uninstalling, open the InHub iPhone app, go to Account, and choose Delete my InHub data. This permanently removes your listings, source and generated images, advertisements, saved style presets, and cached store details, and scrubs the free-text notes from provider-cost records; your Shopify products already on your storefront are not changed, and your account and credits remain so you can keep using InHub.
Uninstalling InHub from your Shopify store revokes all paired devices. When Shopify sends the shop-redaction request after uninstall (about 48 hours later), we delete your listings, source and generated images, advertisements, style presets, devices, pairing records, and cached store details, destroy any remaining purchased credits, scrub the free-text notes from provider-cost records, and anonymize the store record, retaining only the billing records we are legally required to keep. You can also revoke any individual device at any time from the Shopify admin.
For any of these requests, or to reach us about your data, email info@inhubstudio.io. We respond within 30 days. If you are in a jurisdiction with a data- protection authority, you also have the right to lodge a complaint with it.
Security
All traffic uses HTTPS. Mobile devices authenticate with individually revocable tokens stored in the iPhone's secure keychain. Images live in private buckets partitioned per store.
Changes to this policy
We may update this policy as InHub changes. The date at the top reflects the current version.
Contact
Super Commerce LLC, PO Box 1260, Alpine, NJ 07620, USA. Questions or data requests: info@inhubstudio.io.