Privacy Policy

This Privacy Policy describes how Swonie ("we", "us", or "our") collects, uses, and shares information when you use SpecFlow (the "App"), a Shopify application available on the Shopify App Store.

By installing or using SpecFlow, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

When you install SpecFlow, we receive access to the following data through Shopify's OAuth flow:

• Shop information: Your store's domain, name, email address, plan tier, and permanent domain.
• Product data: Product titles, descriptions, metafields, and variant information — used solely to attach and display spec tables.
• Theme data: Theme assets and settings — used to detect whether the app embed block is active and to render spec tables correctly.
• Files and metaobjects: File uploads (e.g. PDF datasheets) and metaobject records you create through the app — stored in your Shopify store.
• Session tokens: Encrypted offline access tokens provided by Shopify — stored in our database to authenticate API calls on your behalf.

We do not collect personal data about your customers. We do not have access to customer names, emails, addresses, payment information, or order history.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the SpecFlow app and its features.
• Authenticate API requests to Shopify on your behalf (e.g., reading/writing metafields and metaobjects).
• Manage your subscription plan and billing through Shopify Billing.
• Respond to support inquiries you send us.
• Improve the app and fix bugs based on aggregate, anonymised usage patterns.

We do not sell, rent, or share your data with third parties for marketing purposes.

3. Data Storage and Security

Your session tokens are stored in a PostgreSQL database hosted on infrastructure we control. All data is stored encrypted at rest and transmitted over HTTPS/TLS. We apply industry-standard security practices to protect your information.

Spec table content (rows, columns, settings) is stored as Shopify metafields and metaobjects — directly within your Shopify store, not on our servers. File uploads are stored in your Shopify Files library.

4. Data Retention

We retain your session data for as long as SpecFlow is installed on your store. When you uninstall the app, we receive a Shopify webhook and automatically delete your session record from our database within 48 hours.

Spec table data (metafields and metaobjects) lives in your Shopify store and is governed by Shopify's data retention policies. You can delete it at any time from within the SpecFlow admin or directly via the Shopify admin.

5. Third-Party Services

SpecFlow operates exclusively within the Shopify ecosystem. We rely on:

• Shopify — for authentication, billing, data storage (metafields/files), and storefront rendering. Shopify's privacy policy applies to data processed through their platform.
• Our hosting provider — for running the app server and database. We use a self-hosted infrastructure; no data is shared with cloud analytics services.

6. GDPR and Data Subject Rights

SpecFlow supports Shopify's mandatory GDPR webhooks:

• Customer data request: We confirm that we do not store customer personal data. Any request is acknowledged and responded to within 30 days.
• Customer data erasure: Since we do not store customer personal data, there is nothing to erase on our side.
• Shop data erasure: Upon receiving a shop redact webhook (48 days post-uninstall), any remaining session data for your shop is permanently deleted.

If you are a merchant and wish to request deletion of your account data, please contact us at the address below. We will respond within 30 days.

7. Cookies

SpecFlow does not set cookies in your customers' browsers. The app runs inside the Shopify admin (embedded) and as a theme extension block — neither of which sets tracking or analytics cookies. Shopify may set its own cookies as part of the admin experience; those are governed by Shopify's cookie policy.

8. Children's Privacy

SpecFlow is a business tool intended for Shopify merchants. We do not knowingly collect any data from individuals under the age of 16.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of the app after changes constitutes your acceptance of the revised policy.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Swonie
Email: [email protected]