Usual

Privacy policy

Last updated November 7, 2026

Usual is a subscriptions app for Shopify stores. This explains what we collect, why, who we share it with and how long we keep it. “Merchants” are the stores that install Usual; “customers” are the people who subscribe at those stores.

What we collect from merchants

  • The store's Shopify address, name and contact email, and the access Shopify grants the app.
  • The store's settings in Usual, and a record of every change made in the app, by whom and why.
  • Tokens the merchant gives us for other services (such as Recharge or Klaviyo), stored encrypted and never shown again.
  • If you ask for early access on our website: your email, and if you give them, your store address and the subscription app you use now.

What we collect about customers, on a merchant's behalf

  • Subscriptions, mirrored from Shopify: products, prices, schedule, status, and the customer's Shopify ID. Names, emails and addresses stay in Shopify.
  • Customer emails are read from Shopify when an email is sent and not stored. Our email log keeps a masked address, like m…@gmail.com.
  • What a customer chooses in the subscription portal, such as a reason for cancelling.
  • When a merchant imports subscriptions from another app, the customer details in that import, for 30 days.
  • We never see or store card numbers. Payments stay with Shopify.

For customer data, the merchant decides how it's used and we process it for them. Customers with questions about their data should contact the store they subscribe to.

Why we use it

To run subscriptions for the merchant: charging renewals, sending the store's subscription emails, letting customers manage their subscriptions, and showing merchants what's happening. To keep the app secure and fix problems. Early access details are used only to contact you about Usual. We don't sell personal data or use it for advertising.

Who we share it with

  • Shopify, which runs the store, checkout and payments.
  • Fly.io, which hosts the app, and Neon, which hosts its database.
  • Resend, which delivers the store's subscription emails.
  • Klaviyo, only if the merchant connects it: subscription events with the customer's email, so the store can send its own emails.
  • AI agents and API keys the merchant creates, which see only what the merchant allows, and never card details.

How long we keep it

  • Imported customer details: 30 days.
  • Customer data exports for a privacy request: 30 days.
  • When Shopify asks us to delete a customer's data, we remove everything that identifies them. Money and schedule history stay for the merchant's records, no longer tied to a person.
  • When a store uninstalls, we delete all of its data 48 hours later, when Shopify asks us to.
  • Early access requests: until you ask us to remove them, or until we launch and no longer need them.

Security

Each store's data is separated in the database itself, so one store's queries can't see another's. Data is encrypted in transit, tokens for other services are encrypted at rest, and API keys are stored only as a hash.

Your choices

You can ask to see, correct or delete personal data we hold about you. Customers can also ask the store, which can make the request through Shopify. To ask us, contact support@usualsubs.com.

Changes

If we change this policy, we'll update the date above, and tell merchants about anything significant.