ShopFlow ← Back to ShopFlow

Privacy Policy

Effective date: May 31, 2026 Last updated: May 31, 2026

ShopFlow is built on a simple promise: your order data is yours, it stays in your browser, and we only touch it to help you make things. This policy explains exactly what data ShopFlow collects, where it goes, and how you control it.

1. Summary

  • Order data — including buyer names, addresses, and order IDs — never leaves your browser. It's stored locally on your device only.
  • ShopIQ sends only personalization text (the instructions buyers leave) to Anthropic's Claude API for parsing — never buyer names, addresses, or order IDs.
  • We save your shop's learned parsing patterns on our servers so they're not lost if you reinstall — but never any individual order or buyer data.
  • We learn anonymized formatting patterns across shops to make parsing better for everyone — never buyer content, never anything tied to your shop identity.
  • Payment processing is handled by Stripe (when subscriptions launch). The ShopFlow extension itself requires no account login — it works the moment you install it.
  • We never sell your data. Ever. To anyone.

2. What Stays in Your Browser

Everything that contains buyer information lives in Chrome's local storage on your computer. It is never transmitted to ShopFlow's servers, never logged, never analyzed remotely. This includes:

  • Buyer names and shipping addresses
  • Order IDs and transaction details
  • The full list of your current open orders
  • Etsy conversation messages
  • Your checkbox state and production progress
Verify it yourself

Open Chrome DevTools → Network tab while ShopFlow is running. The only outgoing requests you'll see are ShopIQ calls to Anthropic (containing personalization text only — see Section 3) and rule-backup calls to ShopFlow's own servers (containing learned pattern data only — see Section 4). No buyer names, addresses, or order IDs ever appear in network traffic.

3. What ShopIQ Sends to Anthropic

ShopIQ uses Claude Haiku by Anthropic to understand personalization text — the instructions buyers leave when they order. To do this, ShopFlow sends only the personalization text itself, plus the product title and item count needed to interpret it correctly.

Example of what gets sent:

{
  "personalization": "Bag 1 Ashley with heart icon, Bag 2 Emma bow",
  "title": "Custom Makeup Bag",
  "setSize": 2
}

Example of what is never sent:

  • Ashley's last name, address, or email
  • The Etsy order number
  • Your shop's transaction history
  • Any other order metadata

Data sent to Anthropic is governed by Anthropic's Privacy Policy. Anthropic does not use this data to train their models when accessed via their API.

4. What ShopFlow Saves on Our Servers

ShopFlow saves your shop's learned parsing patterns — not your orders. When ShopIQ understands that a particular listing always has a martini glass in row 2, that structural pattern is saved to our servers so it's not lost if you reinstall the extension or use ShopFlow on a different device.

What's saved per shop:

  • A shop identifier (your Etsy shop name)
  • Listing format profiles (which rows are fixed vs. variable for each of your listings)
  • Confirmed attribute rules — e.g. "martini" formats as "Martini Glass" in your shop
  • Formatting preferences you've set
  • The date the backup was last updated

What's never saved:

  • Individual buyer names or order contents
  • Any personally identifiable information about your buyers
  • Your shop's sales history or revenue
  • Etsy conversation contents
  • The raw text of customer personalization (this only ever lives in your browser)
A note on account login

The ShopFlow extension itself does not require you to create an account or log in. It works the moment you install it. Your per-shop rule backup is associated with your shop identifier, not an account. When subscriptions launch, account creation will be handled separately on getshopflow.app for payment purposes only — and described in this policy at that time.

5. How ShopFlow Learns Across Shops

ShopFlow gets smarter for everyone over time by learning anonymized formatting patterns across shops. This is what makes SmartParse more accurate the longer ShopFlow exists — your shop benefits from patterns other shops have helped establish, and other shops benefit from patterns yours helps establish.

To be precise about what this means:

What gets shared across shops:

  • Anonymized structural formatting patterns — e.g. "personalization fields that contain a 6-digit date are typically wedding dates"
  • Aggregate counts of how often a pattern appears
  • Confidence scores for parsing rules

What is never shared across shops:

  • Buyer names, messages, or any customer content
  • Order contents or transaction data
  • Your shop name, identifier, or anything else that could tie a pattern back to you
  • Anything that could identify a specific buyer, order, or shop

Once a pattern is promoted to the shared pool, it becomes a collective signal — aggregated across many shops in a way that cannot be linked back to the shop or shops that contributed it.

Important — retention of anonymized patterns

Because shared patterns are anonymized and aggregated, they cannot be linked back to your shop. As a result, they are retained even after you reset your local data or delete your account. We cannot selectively remove your contribution from the collective pool because we no longer know which contributions came from you. If this is a concern, please review this section carefully before using ShopFlow.

6. Third-Party Services

ShopFlow uses the following third-party services to deliver the product. Each has its own privacy policy, linked below.

ServiceWhat it doesWhat we send
Anthropic
Privacy policy ↗
ShopIQ uses Claude Haiku to parse personalization text Personalization text only — never buyer names, addresses, or order IDs (see Section 3)
Vercel
Privacy policy ↗
Hosting for getshopflow.app, the ShopFlow API endpoints, and per-shop rule backups Standard web request logs (IP address, browser type) for the website; per-shop rule backups for the API endpoints
Stripe
Privacy policy ↗
Payment processing for subscriptions (when active) Email and billing details you enter at checkout. We never see your full card number — Stripe handles it directly.
Loops
Privacy policy ↗
Sending transactional and marketing emails (waitlist, trial reminders) Your email address only. You can unsubscribe at any time.

7. Chrome Extension Permissions

The ShopFlow Chrome extension requests the following permissions, each used only for the purpose described:

PermissionWhy ShopFlow uses it
activeTab To read the Etsy orders page you're currently viewing, so SmartParse can parse your orders
storage To save your production checkbox state, parsed orders, and ShopIQ rules locally in your browser
scripting To read the DOM of the Etsy orders page when you click the ShopFlow icon
sidePanel To display the ShopFlow production sheet as a side panel next to your Etsy orders
Host permission for etsy.com So ShopFlow only runs on Etsy's orders page and nowhere else

ShopFlow does not request access to other tabs, browsing history, bookmarks, downloads, or any other sensitive Chrome data.

8. Data Retention and Deletion

ShopFlow has three distinct categories of data, each with different deletion behavior. Understanding the differences matters — please read carefully.

Category 1 — Local browser data

Includes orders, checkbox state, conversations, locally-cached ShopIQ rules, and the raw customer text those rules were learned from.

  • Persists until: you uninstall the extension, or use the in-app "Reset ShopFlow" button in Settings, or run shopflow.reset() in the extension's developer console.
  • Recoverable: Yes — if you reinstall and re-sync, your per-shop server backup (Category 2) will repopulate your learned patterns.

Category 2 — Per-shop server backup

The structural rule patterns ShopFlow saves on its servers so they're not lost across devices (described in Section 4). Identified by your shop name.

  • Persists until: you request deletion by emailing privacy@getshopflow.app from the email you want associated with your shop.
  • Deleted within: 30 days of verified request.
  • Recoverable: No — once deleted, your shop's specific learned patterns are gone. You can start fresh by reinstalling, but ShopIQ will need to re-learn your shop from scratch.

Category 3 — Anonymized cross-shop pattern pool

The aggregated, anonymized formatting patterns that ShopFlow learns across all shops (described in Section 5).

  • Persists: Indefinitely.
  • Removable: No — because contributions are anonymized and aggregated, individual contributions cannot be identified or removed after the fact. Neither local Reset nor account deletion affects this pool.
  • Why we made this choice: The anonymized pool is what makes ShopFlow better for every seller over time. Allowing removal would require keeping a link between contributions and shops — which would defeat the purpose of anonymization. We chose stronger anonymization over reversibility.

What's required by law

Some data must be retained even after deletion for legal compliance — for example, payment records (held by Stripe per their policy) and tax records. We retain only the minimum required by law.

9. Your Rights

Depending on where you live, you have rights to access, correct, export, or delete your personal information. ShopFlow honors these rights for all users regardless of jurisdiction.

How to exercise your rights:

  • See what's stored: Open the ShopFlow sidepanel, click the ⚙ icon in the header, and choose "View My Data". The panel shows everything ShopFlow has stored — both locally and on our servers — in two clearly labeled sections. You can also copy a full JSON snapshot for your records.
  • Reset all local data: In the same Settings panel, click "Reset ShopFlow". After a confirmation prompt, this permanently deletes all ShopFlow data on this device, including learned patterns and the raw customer text those patterns were learned from. Your account and per-shop server backup are not affected.
  • Delete your account and per-shop server backup: In the Settings panel, click "Delete my account →". This opens a pre-filled email to privacy@getshopflow.app. We'll confirm and complete deletion within 30 days.
  • Export your data: Use the "Copy as JSON" button in View My Data, or email privacy@getshopflow.app for a machine-readable copy of your server-side data.
  • Correct or update your information: Edit rules directly in the ShopFlow sidepanel, or email us for anything stored server-side.
A note on View My Data

For privacy reasons, the "View My Data" panel summarizes learned patterns rather than re-displaying the raw customer messages they were learned from. You'll see counts (e.g. "47 patterns learned, 12 trusted") and the structural rules themselves, but not the original buyer text. The JSON export follows the same rule. The raw buyer text exists only in your browser's local storage and can be inspected directly via shopflow.debug() in the extension's developer console if needed.

For California residents (CCPA): You have the right to know what personal information we collect, to request deletion, and to opt out of any sale of personal information. ShopFlow does not sell personal information.

For UK and EU residents (GDPR): Our lawful basis for processing your data is the legitimate interest of operating and improving the ShopFlow service. You have rights to access, rectification, erasure, restriction of processing, data portability, and to object to processing. Contact us at privacy@getshopflow.app to exercise these rights. Note that anonymized cross-shop patterns (Section 5) cannot be removed once aggregated, as described in Section 8.

10. Anonymized Usage Analytics

To understand how ShopFlow is being used and to improve the product, we may collect anonymized, counts-only usage analytics. If/when this is active, it follows the same architectural rules as cross-shop learning:

What analytics may include:

  • Counts of how often features are used (e.g. "Reset clicked," "ShopIQ rule accepted")
  • Aggregate parsing accuracy metrics
  • A hashed shop token used solely to prevent double-counting
  • Extension version and browser version for compatibility tracking

What analytics will never include:

  • Order content, buyer names, or any customer data
  • Your shop name in plaintext or anything else that identifies you
  • The text of parsed personalization or messages

Like the anonymized cross-shop pattern pool, analytics data is aggregated in a way that cannot be linked back to your shop and is retained even after account deletion. You can opt out of analytics in the ShopFlow Settings panel.

11. Data Security

ShopFlow takes reasonable steps to protect your data:

  • All transmission to and from our servers uses HTTPS encryption
  • API tokens are stored encrypted
  • We do not store payment card information; Stripe handles all of it
  • Server-side data access is restricted via our infrastructure provider's access controls

No system is 100% secure. In the unlikely event of a data breach affecting your account, we will notify affected users via email within 72 hours of discovery, as required by applicable law.

12. Children's Privacy

ShopFlow is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at privacy@getshopflow.app and we will delete it.

13. International Users

ShopFlow's servers are hosted in the United States. By using ShopFlow, you consent to the transfer of your data to the United States, which may have different data protection rules than your country of residence. For users in the UK, EU, and other regions with data protection laws, we honor your rights as described in Section 9.

14. Future Platforms

ShopFlow currently works with Etsy only. If we expand support to additional platforms in the future, we'll update this policy and notify users at least 14 days before any changes affect your data.

15. Changes to This Policy

We may update this Privacy Policy from time to time as the product evolves or as required by law. When we make material changes:

  • We'll update the "Last updated" date at the top of this page
  • We'll notify users via email (for waitlist subscribers) at least 14 days before the changes take effect
  • For significant changes (e.g. new data collection or expanded sharing), we'll require renewed consent before continuing service

Your continued use of ShopFlow after changes take effect constitutes acceptance of the updated policy.

16. Contact Us

Questions about this Privacy Policy, your data, or your rights? We're a small team and we read every email.

  • Privacy questions: privacy@getshopflow.app
  • General support: hello@getshopflow.app

ShopFlow is not affiliated with, endorsed by, or sponsored by Etsy, Inc. "Etsy" is a registered trademark of Etsy, Inc.

ShopFlow
  • Home
  • Privacy Policy
  • Terms of Service
  • Contact

© 2026 ShopFlow. Not affiliated with Etsy, Inc.