ScanFlow Privacy Policy

Overview

ScanFlow is a Shopify app that lets merchants create QR code marketing campaigns and track the sales they drive. This policy explains what information ScanFlow collects, how it's used, and how it's protected -- both for merchants who install the app and for shoppers who scan a ScanFlow QR code.

Information we collect

From merchants who install ScanFlow:

• Your shop domain and an access token that lets ScanFlow act on your store through Shopify's API.
• The campaigns you create -- QR code destinations, names, and the products, collections, pages, or discounts you attach to them.
• Basic account identifiers for staff who use ScanFlow inside your Shopify admin.

From shoppers who scan a ScanFlow QR code:

• The time of the scan and an internal, randomly generated visitor ID -- never a name or contact detail.
• If that scan leads to a paid order, the resulting order ID and revenue amount, matched automatically through a URL parameter attached to the redirect. ScanFlow never receives or stores a shopper's name, email address, phone number, or Shopify customer ID.

Shopify permissions we request

ScanFlow requests the minimum Shopify Admin API access it needs to work:

• read_products -- to let you pick a product or collection as a QR code destination.
• read_content -- to let you pick a page or blog article as a QR code destination.
• read_discounts -- to let you attach an existing discount to a campaign.
• read_orders -- to match paid orders back to the scan that drove them, for revenue reporting.

How we store and protect data

ScanFlow's data is stored on Google Cloud (Firebase) infrastructure in the us-central1 region, in a project used exclusively for ScanFlow. Access is restricted through Google Cloud IAM, and sensitive credentials such as your store's API secret are kept in Google Cloud Secret Manager rather than stored as plain text.

Data retention and deletion

We keep your campaign and analytics data for as long as ScanFlow is installed on your store. When you uninstall ScanFlow, Shopify notifies us and we permanently delete all data associated with your store -- campaigns, QR codes, scan records, analytics, reports, and your access token -- typically within 48 hours.

Because ScanFlow never stores a shopper's name, email, phone number, or Shopify customer ID, there is no shopper-identifying data to export or erase when Shopify's data request or redaction webhooks fire for an individual shopper.

Third parties

ScanFlow shares data only with Shopify (the platform it's built on) and Google Cloud / Firebase (its hosting and database provider). We do not sell data, and we do not share it with advertisers or other third parties.

Your rights

Merchants can remove all of their ScanFlow data at any time by uninstalling the app. Shoppers with questions about a store's use of ScanFlow should contact that store directly -- ScanFlow has no way to identify or contact individual shoppers, since it never collects their personal information.

Changes to this policy

If this policy changes, we'll update the date at the top of this page.

Contact us

Questions about this policy or ScanFlow's data practices can be sent to cygentechnologieslimited@gmail.com.