Privacy policy

We collect what we need to run ShopFlow: the marketplace, shops' online stores and their dashboards. A shop's data belongs to the shop. We don't sell personal data and we don't use anyone's details for our own marketing.

• Account details: name, email address and password (stored as a secure hash, never in plain text).
• Shop data a seller adds: products, photos, stock, orders, customers, notes and conversations.
• Orders placed in a store: the buyer's name, email, phone and delivery address, and what they bought. These go to the shop the order was placed with.
• Reviews: the rating and text, shown with the reviewer's first name and last initial.
• Technical logs (requests and errors) so we can keep ShopFlow running and fix problems.

You can check out without an account. Your order details are shared with the shop you buy from so it can deliver your order, and the shop is responsible for them. If you create an account and confirm your email, orders placed with that email appear under My orders.

When customers order from your shop or you record a customer, you are responsible for that information and we process it on your behalf, only to provide ShopFlow to you (for example order history, emails about their order, or a ReplyFlow draft).

To draft a reply, ReplyFlow sends Anthropic (Claude) the recent messages in that conversation, the customer's name, their recent orders (numbers, status, totals), and the shop's products, prices, stock and delivery and return details. It never sends email addresses, phone numbers or delivery addresses. Drafts are never sent to customers unless a person chooses to send them.

Vercel (hosting), Neon (database), Cloudflare R2 (product photos and shop images), Resend (email), Anthropic (ReplyFlow drafts) and, where a shop accepts cards, Stripe (payments; ShopFlow never sees full card numbers).

We keep data while an account is open. Deleting your account (My account or Settings → Privacy and data) deletes it straight away, together with every shop you are the only owner of and all of that shop's data. Copies may remain in encrypted database backups for up to 7 days. Orders you placed with other shops stay with those shops as their sales records.

You can see and correct your details in your account, download everything we hold about you (and your shop) as a file, and delete your account at any time. For anything else, email hello@shopflow.example.

Questions about privacy? Email hello@shopflow.example.