ShopFlow is built on a simple promise: your order data is yours, it stays in your browser, and we only touch it to help you make things. This policy explains exactly what data ShopFlow collects, where it goes, and how you control it.
Everything that contains buyer information lives in Chrome's local storage on your computer. It is never transmitted to ShopFlow's servers, never logged, never analyzed remotely. This includes:
Open Chrome DevTools → Network tab while ShopFlow is running. The only outgoing requests you'll see are ShopIQ calls to Anthropic (containing personalization text only — see Section 3) and rule-backup calls to ShopFlow's own servers (containing learned pattern data only — see Section 4). No buyer names, addresses, or order IDs ever appear in network traffic.
ShopIQ uses Claude Haiku by Anthropic to understand personalization text — the instructions buyers leave when they order. To do this, ShopFlow sends only the personalization text itself, plus the product title and item count needed to interpret it correctly.
{
"personalization": "Bag 1 Ashley with heart icon, Bag 2 Emma bow",
"title": "Custom Makeup Bag",
"setSize": 2
}
Data sent to Anthropic is governed by Anthropic's Privacy Policy. Anthropic does not use this data to train their models when accessed via their API.
ShopFlow saves your shop's learned parsing patterns — not your orders. When ShopIQ understands that a particular listing always has a martini glass in row 2, that structural pattern is saved to our servers so it's not lost if you reinstall the extension or use ShopFlow on a different device.
The ShopFlow extension itself does not require you to create an account or log in. It works the moment you install it. Your per-shop rule backup is associated with your shop identifier, not an account. When subscriptions launch, account creation will be handled separately on getshopflow.app for payment purposes only — and described in this policy at that time.
ShopFlow gets smarter for everyone over time by learning anonymized formatting patterns across shops. This is what makes SmartParse more accurate the longer ShopFlow exists — your shop benefits from patterns other shops have helped establish, and other shops benefit from patterns yours helps establish.
To be precise about what this means:
Once a pattern is promoted to the shared pool, it becomes a collective signal — aggregated across many shops in a way that cannot be linked back to the shop or shops that contributed it.
Because shared patterns are anonymized and aggregated, they cannot be linked back to your shop. As a result, they are retained even after you reset your local data or delete your account. We cannot selectively remove your contribution from the collective pool because we no longer know which contributions came from you. If this is a concern, please review this section carefully before using ShopFlow.
ShopFlow uses the following third-party services to deliver the product. Each has its own privacy policy, linked below.
| Service | What it does | What we send |
|---|---|---|
| Anthropic Privacy policy ↗ |
ShopIQ uses Claude Haiku to parse personalization text | Personalization text only — never buyer names, addresses, or order IDs (see Section 3) |
| Vercel Privacy policy ↗ |
Hosting for getshopflow.app, the ShopFlow API endpoints, and per-shop rule backups | Standard web request logs (IP address, browser type) for the website; per-shop rule backups for the API endpoints |
| Stripe Privacy policy ↗ |
Payment processing for subscriptions (when active) | Email and billing details you enter at checkout. We never see your full card number — Stripe handles it directly. |
| Loops Privacy policy ↗ |
Sending transactional and marketing emails (waitlist, trial reminders) | Your email address only. You can unsubscribe at any time. |
The ShopFlow Chrome extension requests the following permissions, each used only for the purpose described:
| Permission | Why ShopFlow uses it |
|---|---|
| activeTab | To read the Etsy orders page you're currently viewing, so SmartParse can parse your orders |
| storage | To save your production checkbox state, parsed orders, and ShopIQ rules locally in your browser |
| scripting | To read the DOM of the Etsy orders page when you click the ShopFlow icon |
| sidePanel | To display the ShopFlow production sheet as a side panel next to your Etsy orders |
| Host permission for etsy.com | So ShopFlow only runs on Etsy's orders page and nowhere else |
ShopFlow does not request access to other tabs, browsing history, bookmarks, downloads, or any other sensitive Chrome data.
ShopFlow has three distinct categories of data, each with different deletion behavior. Understanding the differences matters — please read carefully.
Includes orders, checkbox state, conversations, locally-cached ShopIQ rules, and the raw customer text those rules were learned from.
shopflow.reset() in the extension's developer console.The structural rule patterns ShopFlow saves on its servers so they're not lost across devices (described in Section 4). Identified by your shop name.
The aggregated, anonymized formatting patterns that ShopFlow learns across all shops (described in Section 5).
Some data must be retained even after deletion for legal compliance — for example, payment records (held by Stripe per their policy) and tax records. We retain only the minimum required by law.
Depending on where you live, you have rights to access, correct, export, or delete your personal information. ShopFlow honors these rights for all users regardless of jurisdiction.
For privacy reasons, the "View My Data" panel summarizes learned patterns rather than re-displaying the raw customer messages they were learned from. You'll see counts (e.g. "47 patterns learned, 12 trusted") and the structural rules themselves, but not the original buyer text. The JSON export follows the same rule. The raw buyer text exists only in your browser's local storage and can be inspected directly via shopflow.debug() in the extension's developer console if needed.
For California residents (CCPA): You have the right to know what personal information we collect, to request deletion, and to opt out of any sale of personal information. ShopFlow does not sell personal information.
For UK and EU residents (GDPR): Our lawful basis for processing your data is the legitimate interest of operating and improving the ShopFlow service. You have rights to access, rectification, erasure, restriction of processing, data portability, and to object to processing. Contact us at privacy@getshopflow.app to exercise these rights. Note that anonymized cross-shop patterns (Section 5) cannot be removed once aggregated, as described in Section 8.
To understand how ShopFlow is being used and to improve the product, we may collect anonymized, counts-only usage analytics. If/when this is active, it follows the same architectural rules as cross-shop learning:
Like the anonymized cross-shop pattern pool, analytics data is aggregated in a way that cannot be linked back to your shop and is retained even after account deletion. You can opt out of analytics in the ShopFlow Settings panel.
ShopFlow takes reasonable steps to protect your data:
No system is 100% secure. In the unlikely event of a data breach affecting your account, we will notify affected users via email within 72 hours of discovery, as required by applicable law.
ShopFlow is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at privacy@getshopflow.app and we will delete it.
ShopFlow's servers are hosted in the United States. By using ShopFlow, you consent to the transfer of your data to the United States, which may have different data protection rules than your country of residence. For users in the UK, EU, and other regions with data protection laws, we honor your rights as described in Section 9.
ShopFlow currently works with Etsy only. If we expand support to additional platforms in the future, we'll update this policy and notify users at least 14 days before any changes affect your data.
We may update this Privacy Policy from time to time as the product evolves or as required by law. When we make material changes:
Your continued use of ShopFlow after changes take effect constitutes acceptance of the updated policy.
Questions about this Privacy Policy, your data, or your rights? We're a small team and we read every email.
ShopFlow is not affiliated with, endorsed by, or sponsored by Etsy, Inc. "Etsy" is a registered trademark of Etsy, Inc.