Privacy policy

This policy describes how Flam processes information when a merchant installs and uses the Flam Shopify app.

Information we process

We process the shop domain, authorized Shopify installation credentials, product and variant information selected by the merchant, generated media, flam publishing configuration, and operational logs needed to provide and secure the service.

How we use information

We use information only to authenticate the store, generate and publish requested experiences, provide support, prevent abuse, and improve reliability. We do not sell merchant or customer data.

Customer data

The current product does not intentionally persist Shopify customer records. Shopify privacy webhooks are verified and honored.

Retention and deletion

Installation credentials are deleted after uninstall or a verified shop-erasure request. Generated media and operational records are retained only as needed to provide the service or meet legal obligations. Merchants can request deletion.

Security and subprocessors

Credentials are encrypted at rest and access is limited to service operation. Hosting, database, media-generation, and monitoring providers may process data as subprocessors under appropriate agreements.

Contact

Privacy requests: support@example.com.

Before public launch: company legal name, postal address, jurisdiction, final subprocessors, and retention periods must be reviewed and inserted by authorized counsel.