Privacy Policy

Last updated: August 14, 2026

UploadFlow AI (“UploadFlow”, “we”, “us”) is a Shopify application operated by Pacific Softwares. This policy explains how we collect, use, and protect data when merchants install and use the app.

Information we collect

• Shop data — Shopify domain, shop ID, plan, and OAuth tokens required to operate the embedded app.
• Order & customer context — order identifiers, customer name/email when needed to link uploads to orders or send Ask-for-file re-upload links.
• Uploaded files & metadata — customer-submitted files, optional AI/OCR results, approval status, and revision history.
• Usage data — upload counts, storage usage, and operational logs for quotas, security, and support.
• Support messages — content you send via in-app support forms.

How we use information

• Provide storefront uploads, file review, Ask-for-file links, notifications, optional AI/OCR, and storage features
• Enforce Free/Pro plan limits and Shopify Billing
• Respond to support requests and improve reliability
• Comply with Shopify platform requirements and applicable law

Shopify GDPR webhooks

UploadFlow implements Shopify’s mandatory compliance webhooks:

• customers/data_request — we assemble customer-related orders, upload requests, uploads, notifications, and OCR fields into an export for the merchant.
• customers/redact — we redact customer PII in those records and delete related uploaded files from object storage.
• shop/redact — after uninstall, we purge stored files for the shop and delete the shop’s app data.

When a shop uninstalls the app, associated shop data is deleted or anonymised according to this process (Shopify may send shop/redact after a retention window).

Storage & processors

Customer upload files are stored on S3-compatible object storage configured for the app (Cloudflare R2 by default in production, or local disk for development). Infrastructure providers process data only to deliver the service.

Sharing

We do not sell customer personal data. We share data only with processors needed to run the app (hosting, storage, email delivery, AI providers when those features are enabled) under appropriate safeguards.

Security

Access tokens and secrets are encrypted at rest where applicable. Admin access uses Shopify session authentication. Ask-for-file / re-upload links use unguessable tokens.

Contact

Privacy questions: hello@pacificsoftwares.com

Pacific Softwares — UploadFlow AI