Privacy Policy

Last updated: March 16, 2026

1. Who we are

Flow24 (“we”, “us”, “our”) is an inventory management application for Shopify merchants. Our app is operated by Flow24, registered in Norway. Contact us at support@flow24.no.

2. What data we collect

When you install Flow24, we access the following data from your Shopify store:

  • Store information: Store name, domain, email address, and currency.
  • Product data: Product titles, variants, SKUs, prices, and inventory levels.
  • Order data: Order totals, line items (product quantities and revenue), order dates, and fulfillment locations. We use this to calculate sales averages and inventory forecasts.
  • Location data: Store location names and IDs for multi-location inventory tracking.
  • Account data: Your name and email when you create an account.

We do NOT collect or store: Customer personal data (names, emails, addresses, phone numbers), payment information, credit card details, or any sensitive customer data from your orders.

3. How we use your data

We use the collected data exclusively to:

  • Display your product inventory and stock levels.
  • Calculate daily sales averages and inventory forecasts.
  • Generate purchase order recommendations.
  • Provide analytics dashboards and reports.
  • Authenticate your account and manage your session.

4. Data storage and security

Your data is stored on secured servers located in Europe. Shopify access tokens are encrypted at rest using AES-256 encryption. All data transmission uses TLS/HTTPS encryption. We implement rate limiting, HMAC verification, and CSRF protection on all API endpoints.

5. Data sharing

We do not sell, trade, or share your data with third parties. Your data is only accessed by our application to provide the services described above. We do not use your data for advertising or marketing purposes.

6. Data retention and deletion

We retain your data for as long as you have an active Flow24 account. When you uninstall the app from your Shopify store, we receive a notification from Shopify and delete all store-related data within 48 hours. You can also request immediate data deletion by contacting us at support@flow24.no.

7. Your rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

  • Access: Request a copy of the data we store about you.
  • Rectification: Request correction of inaccurate data.
  • Erasure: Request deletion of your data.
  • Portability: Request your data in a machine-readable format.
  • Restriction: Request that we limit processing of your data.
  • Objection: Object to processing of your data.

To exercise any of these rights, contact us at support@flow24.no. We will respond within 30 days.

8. Cookies

We use essential cookies only: a session cookie to keep you logged in, and temporary OAuth cookies during the Shopify installation process. We do not use tracking cookies, analytics cookies, or any third-party cookies.

9. Changes to this policy

We may update this privacy policy from time to time. We will notify you of any significant changes by updating the date at the top of this page. Continued use of our app after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this privacy policy or our data practices, contact us at:
support@flow24.no