Privacy Policy — FlowfigAI

Last updated: July 19, 2026

FlowfigAI ("FlowfigAI," "we," "us," or "our") provides a marketing funnel builder and related tools, including an application that integrates with Shopify (the "App"). This Privacy Policy explains how we collect, use, share, and protect information when you use our website at flowfig.ai, our platform, and the App.

By using FlowfigAI, you agree to the practices described in this policy.

1. Who this policy applies to

This policy applies to two groups:

• Merchants — users who create a FlowfigAI account and use our platform to build and export marketing funnels.
• Store customers — shoppers who interact with funnels a merchant has published to their Shopify store (for example, by submitting a lead-capture form).

2. Information we collect

From merchants (account holders):

• Account information: name, email address, and login credentials.
• Billing information: processed by our third-party payment provider; we do not store full card numbers.
• Business and funnel content you create within the platform.

From connected Shopify stores (via the App):

When a merchant connects their Shopify store, we access and process store data solely to provide the App's features:

• Store identification and an access token used to communicate with Shopify on your behalf.
• Product, price, discount, and content data needed to export funnels, create bundle products, and manage themes.
• Customer records only when a store customer submits a lead-capture form on a published funnel (see below).

From store customers (lead capture):

When a shopper submits a lead-capture form (pop-up) on a funnel, we transmit the information they provide — such as email address, phone number, and marketing-consent status — directly to the merchant's Shopify store, where it is stored as a Shopify customer record. FlowfigAI does not retain store customers' personal data in its own database; this information is stored and controlled by the merchant within Shopify.

3. How we use information

We use the information we collect to:

• Provide, operate, and maintain the platform and the App.
• Export funnels, create products and bundles, and manage themes in a connected store.
• Create or update customer records in a merchant's Shopify store when a shopper submits a lead-capture form.
• Communicate with merchants about their account, support requests, and service updates.
• Improve and secure our services.

We do not sell personal information.

4. How we share information

We share information only as needed to operate the service:

• With Shopify — to read and write the store data described above, as authorized by the merchant.
• With service providers — such as hosting and payment processors, who process data on our behalf under appropriate safeguards.
• When required by law — to comply with legal obligations or protect rights and safety.

5. Data retention

• Merchant account and funnel data is retained while the account is active.
• Store data accessed via the App (installation record, exported pages, bundle configuration) is retained while the App is installed. When a merchant uninstalls the App, we delete this data in response to Shopify's shop/redact webhook.
• Because we do not store store customers' personal data, requests to access or delete such data (Shopify's customers/data_request and customers/redact webhooks) are handled accordingly; any such data resides within the merchant's Shopify store.

6. Your rights

Depending on your location, you may have rights under laws such as the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), including the right to access, correct, delete, or restrict the processing of your personal information, and to data portability.

• Merchants may exercise these rights by contacting us at [email protected].
• Store customers should contact the merchant whose store they interacted with, as that merchant controls their data. Merchants can fulfill these requests through Shopify.

7. Data security

We use reasonable technical and organizational measures to protect information, including secure transmission and restricted access to credentials. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International data transfers

Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers in accordance with applicable data protection law.

9. Children's privacy

FlowfigAI is not directed to individuals under 16, and we do not knowingly collect their personal information.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date above.

11. Contact us

If you have questions about this Privacy Policy or our data practices, contact us at:

FlowfigAIEmail: [email protected]

‍