FlowAR Privacy Policy

Information we access from Shopify

When a merchant installs FlowAR, and only with the permissions the merchant grants, the app reads the following from the merchant's Shopify store through Shopify's Admin API:

• Company and company-contact records (Shopify B2B), including a contact's email address.
• Orders and their payment terms, financial status, totals, and outstanding balances.
• Basic store profile (name, currency, timezone, contact email) used to configure the app.

The app requests only the scopes it needs (read access to customers, orders, companies, and payment terms, and write access to mark orders paid). It uses a 60-day order window and does not request access to your full historical orders.

Information we store

To provide the app's features, we store a derived accounts-receivable ledger on our servers, associated with the installing store: companies, receivables (invoice balances and due dates), recorded payments and their allocation, collections settings and reminder logs, generated statements, and the merchant's app settings. We also record the IP address and timestamp of certain requests to secure the service. We do not store payment-card data.

How we use information

We use this data solely to operate FlowAR for the merchant — to calculate aging and DSO, track outstanding balances and payments, generate statements, and send collections reminders that the merchant configures. We process it on the basis of the merchant's instructions and our legitimate interest in providing and securing the service. We do not use it for advertising and we do not sell it.

Emails and third-party providers

When a merchant enables collections or sends a statement, FlowAR sends email on the merchant's behalf to the company contacts the merchant has designated, via a third-party email provider that processes only the data needed to deliver the message. We host the application and its database with a reputable cloud provider. These sub-processors are bound by their own terms and process data on our instruction. We do not share merchant data with anyone else except where required by law.

Data retention and deletion

We keep a store's data for as long as the app is installed and for a short period afterward to allow reinstallation. When a merchant uninstalls FlowAR, the app's access is revoked; Shopify then sends a shop-redaction request (typically about 48 hours later), on which we permanently delete that store's data. We also honour Shopify's mandatory customer data-request and customer-redaction webhooks. A merchant may ask us to delete their data at any time.

Customers of the merchant

FlowAR processes a limited amount of the merchant's business-customer data — chiefly a company contact's email address, used to send statements and reminders the merchant requests. If you are a customer of a store that uses FlowAR and wish to exercise your rights over your data, please contact that store; we will assist the merchant in responding.

Security

Data is transmitted over TLS and stored on access-controlled infrastructure. Access to the app runs through Shopify's session-token authentication. No method of storage or transmission is completely secure, but we take reasonable measures to protect the data we hold.

Your rights

Depending on where you are, you may have the right to access, correct, or delete personal data, to object to or restrict its processing, and to data portability (GDPR), or to know about and delete personal information and not be discriminated against for exercising those rights (CCPA). Merchants can exercise these rights, or ask us to act on their customers' behalf, by emailing us.

Changes

We may update this policy from time to time. Material changes will be reflected by the "last updated" date above.

Contact

Questions about this policy or FlowAR's data practices? Email support@wizovia.com.