Privacy Policy
Last updated: September 2026
This policy explains what data Flowfy collects, how we use it, and the choices you have. We designed Flowfy to handle conversion data responsibly.
1. Data we collect
We collect account information you provide (name, email, store details) and technical data required to operate the service, such as the conversion events your store sends to Flowfy.
2. How we use data
We use your data to deliver the service: capturing, validating and forwarding conversion events to your connected ad platforms, and to provide reporting, support and billing.
3. Hashing & identifiers
Personal identifiers used for matching are hashed or minimized before they are transmitted to ad platforms where supported. We do not sell your data or your customers’ data.
4. Ad platforms
When you connect Meta, TikTok, Snapchat, ChatGPT Ads (OpenAI) or Google, we send conversion events to those platforms on your behalf through the supported conversion endpoints and formats each requires.
5. Google user data
When you connect Google Ads, Flowfy requests two Google scopes. The Google Ads scope (https://www.googleapis.com/auth/adwords) gives read and manage access to the Google Ads accounts you choose. We use it only to list your ad accounts, show campaign performance next to your store sales, create campaigns and apply changes (pause or resume, budgets, keywords, bids) that you preview and approve, and list or create the conversion action you choose for purchases and check its setup. The Data Manager scope (https://www.googleapis.com/auth/datamanager) is used only to send your own store’s purchase conversions (Google click ID, SHA-256 hashed customer email and phone, and order value) to that conversion action so Google Ads can measure your campaigns. Google user data is shown only to your team, is not stored beyond short-lived caches, is never sold, is never used for advertising or to train AI models, and is never shared with third parties except as needed to provide the service or comply with law. Flowfy’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect Google at any time in Flowfy or at https://myaccount.google.com/permissions.
6. Data retention
We retain event and account data for as long as your account is active or as needed to provide the service, and delete or anonymize it when it is no longer required.
7. Security
We use industry-standard measures to protect data in transit and at rest. No system is perfectly secure, but we continually work to safeguard your information.
8. Your rights
You can access, correct or request deletion of your account data at any time by contacting us. We will respond in line with applicable data-protection laws.
9. Contact
For any privacy question or request, email us at hello@tryflowfy.com and we will get back to you.