Privacy policy

This Privacy Policy explains how Flam ("Flam", "we", "us", or "our") processes information when a Shopify merchant installs or uses the Flam application and related storefront features (the "Service").

Information we process

Shopify and merchant information. We process the merchant's shop domain, Shopify installation and session credentials, user identifiers supplied by Shopify, and product, variant, image, theme-placement, and metafield information needed to provide the Service.

Content and generated media. We process prompts, product assets, configuration choices, uploaded or selected content, generated video, previews, and publishing records submitted or created at the merchant's direction.

Technical and support information. We process service events, timestamps, request and error logs, security and authentication records, browser or device information made available through ordinary web requests, and information merchants include in support requests. Please do not send customer personal data in prompts, custom HTML, or support messages.

The Service is not designed to collect payment data, order data, or Shopify customer profiles, and it does not intentionally create buyer profiles. Storefront media providers may receive ordinary network information, such as an IP address and browser headers, when a buyer's browser requests media.

How and why we use information

We use information to authenticate stores, provide requested generation and publishing features, render storefront experiences, maintain security, prevent abuse, diagnose failures, provide support, comply with law, enforce our terms, and improve Service reliability. We do not sell merchant or customer personal data.

We do not use Shopify Merchant Data or Customer Data to train general-purpose artificial-intelligence or machine-learning models unless Shopify and the affected merchant have provided the express permission required by applicable terms and law.

Service providers and international processing

We may disclose information only as needed to Shopify and to vendors that provide hosting, databases, content generation, media processing and delivery, security, analytics, monitoring, and support. These providers process information for the services they supply to us and may operate in countries other than the merchant's country. Where required, we use contractual or other lawful safeguards for cross-border transfers.

We may also disclose information when reasonably necessary to comply with law, protect rights or safety, investigate abuse, complete a corporate transaction subject to appropriate safeguards, or act on the merchant's instructions.

Retention and deletion

We retain information only for as long as reasonably necessary to provide the Service, maintain security and backups, resolve disputes, and meet legal obligations. Shopify installation credentials are deleted or rendered unusable after a verified uninstall or shop-erasure request. Generated media and operational records may remain for a limited period in active systems or backups before deletion. Merchants may request deletion at any time using the contact below, subject to legal retention requirements.

Security

We use administrative, technical, and organizational safeguards designed to protect information, including encrypted transport, restricted access, signature verification, and encryption of stored Shopify credentials. No system is completely secure, and we cannot guarantee that unauthorized access, loss, or misuse will never occur.

Your choices and rights

Depending on applicable law, individuals may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. Merchants may also uninstall the app through Shopify. We may need to verify identity and authority before completing a request. If a request concerns information controlled by a Shopify merchant, the individual should normally contact that merchant first.

Children

The Service is intended for businesses and authorized adult users. It is not directed to children, and merchants must not intentionally submit children's personal data to the Service.

Changes

We may update this policy to reflect changes to the Service, law, or our practices. We will update the date above and provide additional notice when required by law.

Contact

Privacy, access, correction, or deletion requests may be sent to ashish.patil@flamapp.com.

Flam