Privacy Policy

This Privacy Policy explains how ShopFlow Technologies LLC ("ShopFlow," "we," "us," or "our") collects, uses, and protects information when you use the ShopFlow platform, websites, and related services (the "Service"). By using the Service, you agree to the practices described here.

1. Who this policy covers

ShopFlow is a business-management platform used by shops and service businesses ("Businesses") to manage appointments, customers, payments, and communications. This policy applies to two groups:

• Businesses and their staff who create a ShopFlow account. For this data, we act as a data controller.
• End customers of those Businesses (for example, a shop's clients) whose contact and appointment details a Business stores in ShopFlow. For this data, we act as a data processor on the Business's behalf — the Business decides how that data is used, and end customers should direct privacy requests to the Business they interacted with.

2. Information we collect

Information you provide

• Account information: name, business name, email address, phone number, and login credentials.
• Business content: services, pricing, staff, schedules, and the customer records a Business chooses to store (names, phone numbers, emails, appointment history, notes, and photos uploaded by the Business).
• Communications: SMS messages, call records (caller number, time, and duration of calls routed through a ShopFlow tracking number), and support requests.

Information collected automatically

• Usage data: pages viewed, features used, and actions taken in the Service.
• Device & log data: IP address, browser type, and timestamps.

Payment information

Payments and subscriptions are processed by Stripe. Card numbers and bank details are submitted directly to Stripe and are not stored on ShopFlow's servers. We receive limited information such as the last four digits, card brand, and payment status.

3. How we use information

• Provide, operate, and maintain the Service.
• Send transactional messages on a Business's behalf (appointment confirmations, reminders, rebooking nudges, and missed-call replies).
• Process payments and manage subscriptions.
• Provide customer support and respond to requests.
• Improve and secure the Service, and detect and prevent fraud or abuse.
• Comply with legal obligations.

4. SMS & text messaging

ShopFlow sends SMS messages through Twilio on behalf of Businesses. These messages may include appointment confirmations, reminders, rebooking nudges, missed-call replies, and direct messages from a Business to its customer.

• By providing a mobile number to a Business or to ShopFlow, you consent to receive service-related text messages at that number.
• Message frequency varies. Message and data rates may apply.
• You can opt out at any time by replying STOP to any message. Reply HELP for help. Opting out stops automated texts but may affect appointment notifications.
• Carriers are not liable for delayed or undelivered messages.

5. How we share information

We share information only as needed to run the Service:

• Service providers (subprocessors) who process data on our behalf under contract — including Twilio (SMS and voice/call routing) and Stripe (payments). These providers may only use the data to perform services for us.
• Between a Business and its end customers as part of the Service's normal operation.
• Legal & safety: when required by law, subpoena, or to protect the rights, safety, or property of ShopFlow, our users, or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, with notice as required by law.

We do not sell personal information.

6. Data retention

We retain information for as long as an account is active or as needed to provide the Service. Businesses may delete customer records at any time. After account termination, we delete or de-identify data within a reasonable period, except where retention is required for legal, accounting, or fraud-prevention purposes. Call recordings, if enabled by a Business in the future, are subject to the retention setting chosen by that Business.

7. Security

We use administrative, technical, and physical safeguards — including encrypted connections (HTTPS) and access controls — to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your rights & choices

Depending on your location, you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To exercise these rights for a ShopFlow account, contact us using the details below. If your data was provided to a Business that uses ShopFlow, please contact that Business directly, as they control how it is used.

9. Cookies

We use cookies and similar technologies (including browser local storage) to keep you signed in, remember preferences, and understand how the Service is used. You can control cookies through your browser settings; disabling them may affect functionality such as staying logged in.

10. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide additional notice. Continued use of the Service after changes take effect constitutes acceptance.

12. Contact us

Questions about this policy or your data? Contact us at:

ShopFlow Technologies LLC
Albuquerque, New Mexico, USA
Privacy: privacy@shopflowtech.com
Support: support@shopflowtech.com