Privacy Policy

Flowfeed LLC

Effective date: June 28, 2026 Last updated: July 13, 2026

This Privacy Policy explains how Flowfeed LLC ("Flowfeed," "we," "us," or "our") collects, uses, discloses, and protects information in connection with our website at flowfeed.io, our web application at app.flowfeed.io, and the related services we provide (collectively, the "Service").

Flowfeed is a business-to-business software service for United States–based Shopify merchants. The Service ingests product data from a merchant's suppliers, normalizes and enriches that data, and publishes and synchronizes store-ready listings to the merchant's Shopify store. This Policy is written for the businesses and individuals who visit our website or use our application.

If you have questions about this Policy or our privacy practices, contact us at legal@flowfeed.io.

1. Scope of This Policy

This Policy applies to:

• Visitors to our marketing website at flowfeed.io
• Users who create and access an account in our application at app.flowfeed.io
• Individuals who contact us for support, sales, or other inquiries

The Service is intended for businesses located in the United States and is not directed to consumers or to individuals located outside the United States.

This Policy does not cover the privacy practices of third parties, including Shopify, your suppliers, or any website we link to. Their handling of your information is governed by their own policies.

2. Information We Collect

2.1 Information you provide directly

• Account information. When you sign up, we collect identifiers needed to create and secure your account, such as your name and email address. Authentication is handled by our identity provider, Clerk.
• Billing information. When you subscribe to a paid plan, payment is processed by Stripe. We receive limited billing details (such as your name, billing contact, plan, and transaction records). We do not receive or store full payment card numbers; those are handled directly by Stripe.
• Communications. If you contact us for support or sales, we collect the information you choose to share, such as your message contents and contact details.

2.2 Information from Google Sign-In

If you choose to sign in using Google, Google shares a limited set of profile information with us so that we can create and authenticate your account. Specifically, we receive:

• Your name
• Your email address
• Your profile picture
• Your Google account identifier

We use this information only to register you, authenticate you, populate your account profile, and communicate with you about the Service. We request only the basic sign-in scopes (such as your email, profile, and OpenID identifier) — we do not request access to your Gmail, Google Drive, Google Calendar, or any other Google service. Our use of information received from Google is limited to the practices described in this Policy.

Flowfeed's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

2.3 Customer data you bring into the Service

To operate the Service, you connect or upload product-related data. This may include:

• Supplier product data — files and feeds you upload or connect (for example, CSV, XLSX, JSON, or PDF files, hosted URLs, spreadsheets, FTP sources, cloud storage, and email attachments) containing product details, pricing, inventory, and related information.
• Product images and media supplied by you or your suppliers.
• Connected store data — data accessed from your Shopify store through Shopify's API in order to create, update, and synchronize listings.

This customer data is processed on your behalf to provide the Service. You are responsible for ensuring you have the rights necessary to provide this data to us.

2.4 Information collected automatically

When you use the website or application, we and our analytics providers automatically collect certain technical and usage information, such as:

• Device and browser type, operating system, and language
• IP address and approximate location derived from it
• Pages viewed, features used, links clicked, and interactions within the Service
• Referring URLs and similar diagnostic data

See Section 7 for details on the specific cookies and analytics tools we use.

3. How We Use Information

We use the information described above to:

• Provide, operate, secure, and maintain the Service
• Create and authenticate your account
• Process supplier data, normalize and enrich product content, process images, and publish and synchronize listings to your Shopify store
• Process payments, manage subscriptions, and send billing and transactional communications
• Respond to your inquiries and provide support
• Monitor, debug, and improve the performance and reliability of the Service
• Understand how the Service is used and improve our features and website
• Detect, prevent, and investigate fraud, abuse, and security incidents
• Comply with legal obligations and enforce our agreements

4. AI Processing

A core function of the Service is the AI-assisted extraction, normalization, and enrichment of product data. To provide these features, we send relevant customer data to our AI processing sub-processors, Anthropic, OpenAI, and Google, which process the data through their APIs on our behalf to return normalized and enriched output.

We do not use your catalog data to train AI models. Our AI sub-processors process data submitted to provide the Service's features and are bound by their applicable terms. We do not sell your data.

5. How We Share Information

We do not sell your personal information for money. We share information only as described below.

5.1 Service providers and sub-processors

We share information with vendors that perform services on our behalf. They are permitted to use the information only to provide services to us. Our current sub-processors include:

We may update this list as our vendors change. The current list is available on request at legal@flowfeed.io.

5.2 Legal and protective disclosures

We may disclose information if we believe in good faith that doing so is necessary to comply with applicable law or legal process, enforce our agreements, or protect the rights, property, or safety of Flowfeed, our users, or others.

5.3 Business transfers

If Flowfeed is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to the commitments made in this Policy.

6. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Service. After account closure, we retain information for a limited period as necessary to comply with legal obligations, resolve disputes, enforce agreements, and maintain business records, after which we delete or de-identify it. Customer data you bring into the Service is retained according to your configuration and account status; raw source files are stored to operate and support the Service and removed in line with our retention practices. You may contact legal@flowfeed.io to request deletion as described in Section 9.

7. Cookies and Analytics

We and our providers use cookies and similar technologies on our website and application to operate the Service, remember preferences, and understand usage. The analytics and monitoring tools we use include:

• Google Analytics — website traffic and usage analytics (uses cookies).
• Mixpanel — product usage analytics.
• Plausible — privacy-focused, cookieless website analytics.
• Better Stack — uptime monitoring, logging, and diagnostics.

You can control cookies through your browser settings. Disabling some cookies may affect how the website or application functions. Where required by applicable law, we honor browser-based opt-out preference signals, including the Global Privacy Control (GPC). See Section 9 for California-specific opt-out rights.

8. Your Privacy Choices

• Account information. You can review and update your account information by signing in to app.flowfeed.io or by contacting us.
• Marketing email. You can opt out of non-essential marketing emails using the unsubscribe link in those messages. We may still send transactional and service-related messages.
• Cookies and tracking. You can manage cookies through your browser and, where supported, through opt-out signals such as GPC.
• Access and deletion. You can request access to or deletion of your personal information by emailing legal@flowfeed.io.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you certain rights regarding your personal information.

9.1 Categories we collect

In the past 12 months, we have collected the following categories of personal information: identifiers (such as name, email, and IP address); internet and electronic network activity (such as usage and interaction data); commercial information (such as subscription and transaction records); and inferences drawn from the above. We collect this information from you directly, automatically through your use of the Service, and from our service providers.

9.2 Your rights

Subject to certain exceptions, you have the right to:

• Know what personal information we collect, use, and disclose
• Access a copy of the personal information we hold about you
• Correct inaccurate personal information
• Delete personal information we have collected
• Opt out of any "sale" or "sharing" of personal information
• Not receive discriminatory treatment for exercising your rights

9.3 Sale and sharing

We do not sell your personal information for money. However, our use of certain analytics and advertising cookies may be considered a "sale" or "sharing" of personal information under California law. You may opt out of this activity in either of the following ways:

1. Use a browser or browser extension that transmits the Global Privacy Control (GPC) signal, which we treat as a valid opt-out request where required by law.
2. Email legal@flowfeed.io with the subject line "Do Not Sell or Share My Personal Information."

9.4 How to exercise your rights

To exercise any of these rights, email legal@flowfeed.io. We will verify your request using the information associated with your account. You may use an authorized agent to submit a request on your behalf, subject to verification. We will not discriminate against you for exercising your rights.

10. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, and alteration. Data is transmitted over secure connections (HTTPS) and stored with our hosting and storage providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children's Privacy

The Service is a business tool intended for use by businesses and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us at legal@flowfeed.io and we will take appropriate steps to delete it.

12. Third-Party Services and Links

The Service integrates with and links to third-party services, including Shopify, Google, Clerk, and Stripe. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.

13. United States Processing

Flowfeed operates in the United States, and information is processed and stored in the United States. The Service is intended for users located in the United States.

14. Changes to This Policy

We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after an update takes effect constitutes acceptance of the revised Policy.

15. Contact Us

If you have questions, requests, or concerns about this Policy or our handling of your information, contact:

Flowfeed LLC Email: legal@flowfeed.io