Privacy policy

Expand Flow adds triggers and actions to Shopify Flow. This page says what the app keeps about your store and what it does with it.

What we store

• Your store connection: the shop domain and the access token Shopify gives the app. Tokens are encrypted at rest.
• Your settings: SMTP servers, AI provider keys, saved HTTP credentials, email designs, API tokens (only a hash), tracking rules. Secrets are encrypted at rest and never shown again after you save them.
• Change tracking: only for the fields, metafields, tags and similar items you turn on, the app keeps the last known value of each product, order, customer or other record, encrypted, so it can tell what changed. Nothing else about those records is kept.
• Short-lived technical records: results of recent workflow actions (kept 48 hours, encrypted) so a retry does not repeat work, and counters that stop runaway loops.

We do not sell data and we do not use it for advertising. We do not keep the content of emails or HTTP responses after an action finishes, apart from the short-lived action result above.

Who else sees data

• Cloudflare hosts the app and stores the data above.
• Services you choose: your SMTP server receives the emails you send; the AI provider you configure (Google, Anthropic or OpenAI) receives the prompts and image links you pass to a Generate text action; any URL you call from a Send HTTP request action receives that request.

Our role and data protection terms

You decide which fields are tracked and why, so you are the controller of that data. Expand Flow is your processor: it processes personal data only to run the workflows you set up, only on your instructions, and for no other purpose. We do not sell it, share it for advertising, profile customers or make automated decisions about them. By installing and using the app you accept these terms as the data processing terms between you and us. If you need a signed copy, write to the address below.

Security

• Everything the app stores is encrypted by the app before it is saved, with a separate key per store, and again by the hosting platform. Connections use HTTPS and Shopify requests are verified.
• Only the code that runs your workflows can read this data. There is no support console that shows it.
• Every access to personal data is written to an access log (the store, the action and the kind of data, never the data itself).
• Test and production run separately, with separate keys, storage and test stores.
• Staff access to production systems is limited to the people who need it.

If something goes wrong

If we confirm a security incident that affects your data, we tell you without undue delay and within 72 hours, and say what happened, what data was involved and what to do. We follow a written incident response process: contain, assess, notify, recover and review.

Retention and deletion

When you uninstall the app we erase everything stored for the store right away, and we erase it again when Shopify's shop redact request arrives 48 hours later. We keep no per-store record after uninstall. When Shopify forwards a customer erasure request, we erase that customer's tracked values. Tracked values are never needed to answer a customer data request because they are only fields you chose to track; contact us if you need an export.

Permissions

The app asks for the permissions each feature needs, when you turn the feature on. You can leave a feature off to withhold its permission.

Contact

Questions or requests: expandflow@vomanhkien.com.