1. Introduction
Simply Flow ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
2. Zero Retention Policy
We operate with a strict "Zero Retention" policy for voice data. We do not store recordings or transcripts of your calls after the session is completed, unless explicitly configured otherwise for debugging purposes.
3. Data Collection
We collect information that you provide directly to us, such as when you create an account, configure an agent, or contact support. This may include:
- Account information (email, name)
- Configuration data (agent prompts, tools)
- Usage metrics (call duration, cost)
4. Shopify Integration Data
When you connect your Shopify store to Simply Flow, we process the following data to provide our services:
4.1 Data We Store
For abandoned cart recovery and fulfillment notifications, we temporarily store:
- Customer contact information: email, phone number, first name, last name
- Cart/order details: product information, prices, order status
- Shipping information: tracking numbers, delivery status
4.2 Data We Access But Do Not Store
We access the following data transiently (not stored in our systems):
- Order history (fetched on-demand for voice agent context)
- Customer lists (for test mode configuration only)
- Product catalog (synced separately, no customer PII)
4.3 Purpose of Processing
We process Shopify data solely for:
- Abandoned cart recovery campaigns (contacting customers about incomplete purchases)
- Order fulfillment notifications (shipping status updates)
- AI agent context (providing order information during customer calls)
4.4 Data Retention
Shopify-related customer data is automatically deleted according to our retention policy:
- Abandoned cart data: 90 days, or 30 days after recovery/expiration
- Fulfillment data: 90 days after delivery confirmation
4.5 Data Sharing
We do not sell Shopify customer data. Data may be shared with:
- Voice providers (ElevenLabs) for call functionality - no PII shared
- Telephony providers (Twilio/Telnyx) for phone calls - phone number only
5. Third-Party Services
We use third-party services for specific functionality:
- ElevenLabs for voice synthesis
- Twilio/Telnyx for telephony
- Supabase for authentication and database
- Shopify for e-commerce platform integration
6. Data Security
We implement appropriate technical and organizational measures to protect your data:
- Encryption in transit (TLS 1.2+) and at rest (AES-256)
- Row-level security to isolate merchant data
- Regular security audits and monitoring
- Access logging for compliance purposes
For more details, see our Security page.
7. Your Rights
You have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Withdraw consent for data processing
- Export your data in a portable format
To exercise these rights, contact us at support@simplyflowai.com.
8. Contact Us
If you have any questions about this Privacy Policy, please contact us:
- Privacy inquiries: support@simplyflowai.com
- Data requests: support@simplyflowai.com
- General support: support@simplyflowai.com