iFlowsPrivacy Policy

This Privacy Policy describes how iFlows ‑ Workflow Automation (“iFlows” or “the App”), operated by Neo Apps (“we”, “us”, or “our”), collects, uses, and shares information when merchants install the App on their Shopify store.

iFlows automates repetitive store tasks through workflows that a merchant builds. When something happens in the store — for example, an order is created or cancelled, or a new customer is created — the App checks the conditions the merchant set and carries out the actions they chose, such as adding tags, updating an order note, sending an email, or sending a stock alert. By installing or using the App, you agree to the collection and use of information as described in this policy.

When the App is installed, we access certain Shopify store data through the permissions (scopes) granted during installation, and we store the workflows merchants create in the App:

• Store information: your shop domain, store name, store email address, Shopify plan, and the authentication tokens required for the App to communicate with Shopify on your behalf.
• Store event data: when an event that starts one of your workflows happens — such as an order being created or cancelled, a customer being created, or inventory running low — Shopify sends the App the details of the order, customer, or product involved, and the App may read related records from Shopify, so it can check the workflow’s conditions and carry out its actions.
• Customer information in that data: orders and customer records contain customers’ names, email addresses, phone numbers, and addresses. The App uses them only to run your workflows — for example, to evaluate a condition or to send an email you set up to the right recipient.
• Workflow configuration: the workflows you create — name, trigger, conditions, actions, and status, including the tags, notes, email content, and recipients those actions use — and your app settings.
• Activity records: records of workflow runs — when a workflow ran, the order, customer, or product it ran for, and whether its actions succeeded — so you can see what the App did and troubleshoot problems.
• Support communications: messages you send our support team, and the details you share when you ask us to set up a workflow for you.

We do not collect or store payment or credit card information. Payments are handled entirely by Shopify.

We use the information we collect to:

• provide the App’s core functionality — receiving store events, checking each workflow’s conditions, and carrying out its actions, such as adding tags, updating order notes, sending emails, and sending stock alerts;
• show your workflows, their activity, and your plan usage in Shopify admin;
• set up workflows for you when you ask us to, respond to support requests, and troubleshoot issues;
• keep the App secure and prevent misuse; and
• improve the reliability and performance of the App.

You decide which events a workflow responds to, what it does, and who its emails go to. We process order and customer data on your behalf, only to carry out those instructions.

We do not sell, rent, or trade your data, and we do not use it for advertising or marketing to your customers.

Store, workflow, activity, and session data are stored in a secured database operated by us. All data is transmitted over encrypted connections (HTTPS/TLS), and access to production systems is restricted to authorized personnel who need it to operate and support the App.

While we take commercially reasonable measures to protect your information, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

We only share information in the following limited circumstances:

• The recipients you choose: emails and alerts sent by your workflows go to the addresses you set in each workflow, which may include your team or the customer on an order — once delivered, they sit in the recipients’ inboxes, outside our control;
• Email delivery providers: a third-party email delivery service receives each email’s sender, recipients, and content in order to deliver it;
• Service providers: with infrastructure providers (such as cloud hosting, database, and logging services) strictly as needed to run the App;
• Shopify: data flows between the App and Shopify as required for the App to function, including the tags and notes the App writes to your orders, customers, and products; and
• Legal requirements: when required to comply with applicable law, regulation, legal process, or enforceable governmental request.

We retain store, workflow, and activity data for as long as the App is installed on your store. Shopify’s mandatory privacy webhooks tell us when data must be provided or deleted, and we respond within the timeframes Shopify requires:

• Customer data requests — when one of your customers asks for their data, we compile any records we hold about that customer for you;
• Customer data erasure — we delete any records we hold about that customer; and
• Shop data erasure — after uninstallation, Shopify issues the shop redact request and we delete every workflow, activity record, and setting held for your store.

Changes the App has already made in Shopify — such as tags and order notes — stay on those records after you uninstall it, and emails already sent remain with their recipients. Merchants can also request deletion of their data at any time by contacting us directly.

Depending on where you are located, you may have rights under data protection laws such as the GDPR (European Economic Area / United Kingdom) or the CCPA (California), including the right to:

• access the personal information we hold about you;
• request correction of inaccurate information;
• request deletion of your personal information; and
• receive a copy of your data in a portable format.

To exercise any of these rights, contact us using the details below. If you are a customer of a store using iFlows, you can also direct your request to the merchant, and we will assist them in fulfilling it.

The App uses session tokens and strictly necessary cookies to authenticate merchants inside Shopify admin and keep the App working securely. We do not use advertising or cross-site tracking cookies in the App.

We may update this Privacy Policy from time to time to reflect changes in the App or in applicable law. When we do, we will revise the “last updated” date at the top of this page. Significant changes will be communicated to merchants through the App or by email.

If you have questions about this Privacy Policy or how your data is handled, contact us at support@zephron.ai.