Built to use less data,
and protect what matters.

What this notice covers

This notice explains how ThemeFlow handles information when you use our website, create a workspace, connect a Shopify store, generate storefront files, or contact us.

Information we handle

• Account data: your email address, password hash, workspace membership, and security/session records.
• Shopify store context: the products, collections, content, brand cues, and theme metadata you authorize ThemeFlow to read.
• Creative work: prompts, generated theme files, versions, validation results, and deployment history.
• Operational data: limited request, audit, rate-limit, error, and usage records needed to secure and operate the service.

ThemeFlow’s core workflow does not request customer, order, payment, or write-product access from Shopify.

How we use information

We use this information to authenticate users, understand an authorized store, generate and validate storefront changes, create draft themes, process owner-confirmed publishing, prevent abuse, support users, and improve service reliability.

Service providers

ThemeFlow runs on Cloudflare infrastructure. Store context and prompts may be sent to the selected AI provider only to perform a requested generation task. Shopify processes store authorization and theme operations. A transactional email provider processes verification and recovery messages when email delivery is enabled. We do not sell personal information.

Security and retention

Provider and integration credentials stay in encrypted server-side secret bindings. Shopify access tokens are encrypted before storage. Tenant authorization, audit records, rate limits, and draft-first deployment controls reduce unauthorized access and accidental publishing. We retain information only while it is needed to operate the workspace, meet security obligations, or resolve disputes.

Your choices

You can disconnect a Shopify store, revoke ThemeFlow from Shopify, or ask us to access, correct, export, or delete account information, subject to applicable legal and security requirements.

Contact

For privacy questions or requests, email hello@themeflow.xyz.