Privacy Policy for SwiftFlow

Last Updated: October 18, 2026

SwiftFlow ("we", "us", or "our") provides the SwiftFlow: Local Delivery application (the "App") for Shopify merchants. This Privacy Policy describes what information the App collects, how it is used and shared, and how long it is kept, when a merchant installs the App and when their shoppers use the merchant's store. For merchants, our Data Processing Addendum sets out how we process their customers' personal data on their behalf.

1. Information We Collect

About merchants. Your Shopify store domain, your App settings, your store address and its map coordinates, your billing plan, the email address you choose for weekly reports, and the Shopify admin session Shopify provides when you open the App (an access token and, when Shopify includes them, the staff member's name and email). Each time staff view or download shoppers' details in the App, we record the staff member's Shopify user ID, the page, the time and how many shoppers' details were shown, but not the details themselves.

About shoppers who abandon a checkout (paid plans with abandoned-cart reminders switched on): email address, Shopify customer ID, whether they agreed to marketing emails at checkout, shipping address (street, city, province, postcode and country) and its coordinates, cart total and currency, product titles and quantities, and the link back to their checkout.

About orders: order ID, amounts, currency, payment and refund status, cancellation, the customer's email and Shopify customer ID, cart and checkout identifiers, whether the shipping address is inside the delivery zone, and SwiftFlow's own order attributes (the promised delivery day, the chosen delivery time window, the delivery method (local delivery or store pickup), the pickup location's name, pickup day and pickup time window, and which test group the cart was in). Shipping coordinates are used to decide whether the order is local and are not stored. For a local order we keep the shipping postcode's district only (for example SW4, not the full postcode), so the merchant can see what delivering to each area costs. We do not store payment details, phone numbers, billing addresses, or other order notes and line-item properties.

On the storefront and in checkout: the postcode or address a shopper enters to check delivery, and in Shopify Plus checkouts the shipping address, are used to work out whether they are inside the delivery zone. We keep only whether the check was in the zone and a rounded distance, not the address. Coordinates for a postcode are cached under a keyed code, not the postcode itself. A shopper's IP address is used to limit request rates and is stored only as a keyed code. The shopper's own browser remembers the postcode and an approximate distance, and SwiftFlow adds to the shopper's cart the promised delivery day, the chosen delivery time window, the delivery method (local delivery or store pickup), the pickup location's name, pickup day and pickup time window, and which test group the cart was in.

Delivery waitlist: where the merchant offers it, a shopper outside the delivery zone can ask to be emailed once if the merchant starts delivering to their area, by entering their email and ticking a box. We keep the email address, the postcode's district (for example SW4, not the full postcode) and a rounded distance from the store. This is not consent to marketing: the address is used for that single email only and is never added to a mailing list.

Email events: when an email bounces or the recipient complains, our email provider tells us, and we keep a keyed code of the address so it is not emailed again.

2. How We Use Information

To check whether a shopper's address or postcode is inside the merchant's delivery zone, and to show the delivery day they can get.
To send one email to a shopper on a merchant's delivery waitlist when the merchant starts delivering to their area. It includes an unsubscribe link.
To send one reminder email about an abandoned checkout, only to shoppers who agreed to marketing emails at checkout. Every reminder includes an unsubscribe link.
To tag orders with their promised delivery day, and to show the merchant reports and measurements, including comparisons with shoppers deliberately not shown a feature.
To send merchants the weekly report they ask for, and to handle billing and support.
To answer data requests and deletion requests that Shopify sends us on behalf of merchants and shoppers.

3. Service Providers and Sharing

We do not sell merchants' or shoppers' information. We use these service providers to run the App:

Shopify: the platform the App runs on, and the source of store, checkout and order information.
Fly.io: hosts the App and its database, in the United States.
Google Maps Platform (Geocoding API): receives the postcodes and addresses shoppers enter, and checkout and store addresses that Shopify has not already located, to convert them to map coordinates.
Resend: sends reminder, waitlist and report emails. It receives the recipient's email address and the message, including product titles, the checkout link and the store's domain and address, and tells us about bounces and complaints.
OpenAI: on the Pro plan, drafts reminder text from the cart's product titles and the merchant's reminder message. It does not receive the shopper's email, name or address.
Tigris: stores our encrypted daily database backups, in the United States. It cannot read them: they are encrypted before they leave our database server.

We may also share information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request, or to otherwise protect our rights.

4. Data Retention and Deletion

Abandoned-checkout details (email, customer ID, address, coordinates, checkout link, products and email drafts) are removed 90 days after the checkout's last activity.
The customer's email, customer ID and postcode district on orders are removed 90 days after the order. Order amounts and statuses are kept for the merchant's reports until the store's data is erased.
Delivery checks (in or out of the zone, and a rounded distance) and cached postcode coordinates are kept for 30 days.
Test-group records, keyed by a code, are kept for 90 days.
Delivery waitlist entries are removed 12 months after the shopper asked, or 30 days after their one email is sent, whichever comes first.
Request-rate records, keyed by a code, are kept for 2 days.
Records of staff viewing or downloading shoppers' details are kept for 12 months.
Event data received from Shopify is erased once processed; the processing record is deleted 30 days later.
Data exports prepared for a Shopify data request are available to the merchant for 30 days.
When a merchant uninstalls the App, we delete their Shopify session and stop unsent reminders. When Shopify then asks us to erase the store's data, we delete it. We keep only keyed codes that record that the store has used its free trial, that data was deleted (so delayed events cannot add it back), and which addresses must not be emailed.
When Shopify sends a shopper's data or deletion request, we prepare their data for the merchant or delete it.
We keep encrypted daily backups of our database for 30 days, so deleted data can remain in a backup until it expires. If we ever restore a backup, we repeat every deletion made since it was taken before the App uses the data again.

5. Your Rights

If you are a resident of Europe (GDPR) or California (CCPA), you have the right to access the personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.

6. Changes

We may update this privacy policy from time to time to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.

7. Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by email at hello@logiclooms.io.