Privacy Policy

1. Overview

This Privacy Policy explains how StoreFlow ("StoreFlow," "we," "us," or "our") processes information when a Shopify merchant installs or uses the StoreFlow application, website, documentation, or support services.

StoreFlow is designed to process only the information reasonably necessary to provide merchant-configured wholesale purchasing rules, customer access controls, Quick Order, checkout validation, support, security, and service maintenance.

2. Information StoreFlow may process

Depending on the features configured by a merchant, StoreFlow may process:

• Shopify shop name, shop domain, and app installation details.
• StoreFlow settings, preferences, purchasing rules, and rule sets.
• Product, variant, and collection identifiers and related catalog information needed to apply configured rules.
• Customer identifiers or customer tags when needed to determine whether a merchant-configured rule applies.
• Technical information reasonably needed for authentication, security, troubleshooting, and service reliability.
• Information voluntarily provided in support requests, such as a store URL, screenshots, error messages, and issue descriptions.

3. Information StoreFlow does not intentionally collect

StoreFlow does not intentionally collect customer payment-card numbers, banking credentials, Shopify passwords, or customer account passwords. Payment processing and Shopify authentication are handled by Shopify or the merchant's selected providers.

4. How information is used

StoreFlow uses information only as reasonably necessary to:

• Provide the StoreFlow features selected by the merchant.
• Save and apply merchant-configured settings and rules.
• Authenticate requests and help protect the service from misuse.
• Diagnose errors and maintain service reliability.
• Respond to merchant support requests.
• Comply with applicable law and Shopify platform requirements.

5. Sale and disclosure of information

StoreFlow does not sell merchant or customer personal information. Information may be disclosed when reasonably necessary to operate StoreFlow, protect StoreFlow or its users, respond to lawful requests, or comply with legal obligations.

6. Data retention

StoreFlow retains information only for as long as reasonably necessary to provide the service, maintain required security or business records, resolve disputes, or comply with legal and Shopify requirements. Retention periods may vary depending on the type of information and the reason it is processed.

7. Security and service limitations

StoreFlow uses reasonable administrative and technical safeguards appropriate to the information processed.

No internet transmission, software platform, hosting environment, or electronic storage system can be guaranteed to be completely secure, uninterrupted, or error-free. To the maximum extent permitted by law, StoreFlow is not responsible for incidents caused by factors outside its reasonable control, including compromised merchant credentials, merchant configuration, Shopify platform failures, third-party services selected by a merchant, internet disruptions, or unlawful acts by others.

Nothing in this policy excludes or limits responsibility that cannot lawfully be excluded or limited.

8. Merchant responsibilities

Merchants are responsible for protecting their Shopify credentials, limiting staff access, configuring StoreFlow correctly, testing storefront and checkout behavior, and providing any privacy notices or consents required for their own customers and business.

StoreFlow does not determine a merchant's independent legal obligations and does not provide legal, tax, accounting, or regulatory advice.

9. Shopify platform

StoreFlow operates through Shopify APIs, Shopify Admin, theme app extensions, and Shopify checkout-related capabilities. Shopify processes information under its own terms and privacy policies. StoreFlow is not responsible for Shopify's independent services, security, availability, or data practices.

10. Privacy requests

Merchants and authorized individuals may contact StoreFlow to request access, correction, deletion, or other action regarding information processed by StoreFlow. Requests may be subject to identity verification, applicable law, Shopify requirements, and lawful retention obligations.

Customer requests relating to a Shopify store should generally be directed first to the merchant that controls that store.

11. Changes to this policy

StoreFlow may update this Privacy Policy to reflect changes to the application, Shopify requirements, or applicable law. The revised version will be posted on this page with an updated date.

12. Contact

Questions or privacy requests may be sent to: