Privacy Policy

This Privacy Policy explains how ShopFlow (“we”, “us”) collects, uses, and protects information when you use our website design, AI integration and related services.

If you have questions, contact us at dtduy2014@gmail.com (see the Contact section below).

We collect account information (e.g. name, email), usage data, and content you submit (orders, customers, products) to operate the service.

We may collect technical data such as IP address, device type, and logs for security and reliability.

We use data to provide, improve, and secure the service; to communicate with you about your account; and to comply with legal obligations.

We do not sell your personal information. Aggregated or anonymized data may be used for analytics.

When a shop connects a Facebook Page, we access the Page's name, ID, profile picture and a Page access token (encrypted at rest), and we receive messages people send to that Page along with their public name and profile picture.

We use this data only to let the shop's assistant and staff reply to those Messenger conversations. We do not sell it, use it for advertising, or share it with other shops.

To stop access or have this data deleted, follow the steps at shopflow.vn/data-deletion.

If you sign in with Google, we receive your name, email address and profile picture from your Google account.

We use them only to create and identify your ShopFlow account and show your name and picture inside the dashboard. We do not access your Gmail, contacts, files or any other Google data, and we do not share this information with other shops or use it for advertising.

To let a shop's AI assistant reply to customers, the text and images of incoming messages, together with the shop's own product and policy information, are sent to our AI providers (OpenAI and Anthropic) to generate a reply.

These providers process the data only on our behalf to produce the response; under their API terms it is not used to train their models. We send only what is needed for the conversation and do not send payment card data or passwords.

AI replies are generated automatically and may contain mistakes. Each shop can turn the assistant off for a Page or for an individual conversation at any time, and staff can take over the conversation.

We rely on the following providers to run ShopFlow: Supabase (account sign-in), OpenAI and Anthropic (AI replies), Cloudflare R2 and Vietnix Object Storage (image storage), and Meta (Facebook Messenger). Our main database is hosted on our own server.

Each provider receives only the data needed for its function and is bound by its own terms and security commitments.

We retain data as long as needed to provide the service and as required by law. You may request deletion subject to legal exceptions.

We implement appropriate technical and organizational measures to protect your information.

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data.

To exercise these rights, email dtduy2014@gmail.com. We will respond in accordance with applicable law.

We may update this Privacy Policy from time to time. We will post the updated version and revise the “Last updated” date.

Continued use after changes constitutes acceptance unless otherwise required by law.

ShopFlow — website design and AI integration service, Vietnam.

Email: dtduy2014@gmail.com · Zalo: 0937617698. We aim to reply within 3 business days.