Developers

Documentation, release notes and how the apps work.

Everything technical about the BrandUp Factory Shopify apps in one place: setup and theme integration, access scopes, data handling, what shipped and how to reach the team.

Read the documentationSee what shipped

Changelog

Changes merchants see in the apps, taken from the code history of each app.

  1. Section Store

    Deals are free on every plan

  2. Section Store

    AI Sections for the Enterprise Plan

  3. Section Store

    Keyboard and screen reader support

Full changelog

Security

Where the apps and the platform run, how access is protected and which data each app can reach.

  • Hosting of the website, the platform and the app backends
  • Access scopes of every app, as Shopify shows them before the installation
  • What happens to the data when an app is uninstalled
  • How to report a vulnerability
Security & data protection

Engineering

How the apps are built

The five apps share one approach. Each statement below can be checked in the configuration of the app or in its documentation.

Section StoreCombined ListingsIndex AIProduct PassportGreen Claims Checker
shopify.app.toml: Combined Listings (excerpt)
embedded = true

[access_scopes]
scopes = "read_products,write_products,read_publications,read_markets"

[[webhooks.subscriptions]]
topics = [ "app/uninstalled" ]
uri = "/webhooks/app/uninstalled"

[[webhooks.subscriptions]]
compliance_topics = [ "customers/redact" ]
uri = "/webhooks/customers/redact"

[[webhooks.subscriptions]]
compliance_topics = [ "shop/redact" ]
uri = "/webhooks/shop/redact"

[product.metafields.app.product_group]
type = "json"
access.storefront = "public_read"

  • Theme app extensions, no theme code edits

    Storefront output comes from the app blocks and app embeds of a theme app extension. The apps do not edit theme files; removing a block or uninstalling the app leaves no code behind.

  • Embedded, with Shopify session authentication

    All five apps are embedded in the Shopify admin and authenticate through Shopify. Offline access tokens expire and are refreshed.

  • App-owned metafields and metaobjects

    Section Store, Combined Listings, Digital Product Passport and Green Claims Checker keep the data their theme blocks read in app-owned metafields or metaobjects.

  • Privacy webhooks in every app

    Each app subscribes to the mandatory privacy webhooks of Shopify: customer data request, customer data erasure and shop data erasure.

  • Signed storefront requests

    Storefront requests of Index AI and Digital Product Passport go through the Shopify app proxy on the domain of the shop, so they are signed by Shopify.

  • Billing through Shopify

    Plans, trials and one-time purchases are billed through Shopify.

  • React Router, Prisma and PostgreSQL

    The apps are built with React Router 7 and Prisma on PostgreSQL. The backends run on Heroku; Digital Product Passport and Green Claims Checker run in its EU region.

  • Five admin languages

    The admin interface of each app is available in English, German, French, Spanish and Chinese.