Flow Automation Privacy Policy
Updated and effective on March 24, 2025
The Flow Automation (hereinafter referred to as the "App") is a workflow automation tool provided by SHOPLINE (hereinafter referred to as "the Company" or "we"). It offers a customizable automation solution that enables merchants to design triggers, conditions, and actions, allowing them to streamline operations and optimize business processes efficiently.
This privacy policy (hereinafter referred to as "the Policy") explains how we collect, process, use, retain, share, and transfer your personal data when you use Flow Automation. This Policy applies solely to the personal data you provide when using the App, and does not apply to any third-party websites or services that we do not own or control.
Before using the App, please carefully read this Policy and ensure you understand it. Only after you have understood the Policy should you begin using the App. If you disagree with any part of the Policy, you should immediately stop using App and related services. For your convenience, please refer to Section 8 of this Policy for definitions of important terms. Additionally, please review our SHOPLINE privacy policy that applies to merchants and your customers whose information we process. If any provisions in this policy conflict with provisions of the SHOPLINE privacy policy, the provisions in this policy will apply.
The Company only provides services to users aged 18 and above. For minors under the age of 18, the Company does not knowingly collect their personal data nor provide App or related services to them. Before using the App, please ensure that you meet the age requirement. The Company does not knowingly collect personal data from minors under 18, and you should not provide any personal data of minors to the Company in any form. If you discover that the Company has unintentionally collected personal data from a minor, please notify us immediately, and we will promptly endeavor to delete the relevant data.
1. What Personal Data Do We Collect, Process, and Use?
1.1 Collection, Processing, and Use
- In accordance with legal, legitimate, and necessary principles, and for the purpose of fulfilling Flow Automation Terms of Services and providing you with the services, the Company collects, processes, and uses the personal data of data subjects that you voluntarily provide during the use of App, data generated from your use of the App, and personal data obtained from other service or platform.
- The detailed content and purposes of the personal data collected, processed, and used by the Company are specifically listed in the following table for your reference.
Personal Data Collected and Processed by the Company Purposes of Collection and Use Name and email address. - To provide you with - and improve - the App (e.g., to confirm your identity, to contact you about our products or services)
- To advertise and market our services or features to you
- To comply with legal requirements
Information of your customers uploaded by you into App, such as:
- Their email address, address and phone number.
To provide the service, and assist you in setting up automated workflows. - You acknowledge and authorize us to collect, process, and use personal data relating to your customers in connection with your use of the App, in accordance with applicable data protection laws. You warrant and represent that you have obtained all necessary consents, authorisations, or other lawful bases, as required by applicable law, from your customers or any relevant third parties, permitting us to lawfully collect, process, and use their personal data for the purpose of providing the relevant services.
1.2 If You Decide not to Provide Personal Data
You may decide not to provide some or any of your personal data to us. However, if you do not provide it, we may not be able to provide you with access to certain information or services.
2. Do We Share Personal Data?
We do not share personal data of your customer with any third parties. Also, we do not share personal data of you with any third parties unless one or more of the following circumstances exist.
2.1 Service Providers
To deliver, communicate, market, and promote our services, we rely on third-party service providers. These providers offer key services that assist us in providing App, including but not limited to cloud infrastructure (Amazon Web Services (AWS) Cloud). We authorize these service providers to use or disclose the personal data we provide them to deliver services on our behalf and comply with relevant legal obligations. We require these service providers to contractually ensure the security and confidentiality of the personal data they process on our behalf. Most of our service providers are located in Singapore and the United States.
2.2 Professional Advisors
Where necessary we will share your personal data with our professional advisors such as our lawyers, accountants and auditors.
2.3 Other disclosures
The Company may share your personal data with third parties in one or more of the following circumstances:
- When the Company is required to disclose personal data by applicable law, such as to law enforcement bodies, governmental and regulatory bodies, the courts and other competent authorities that may request personal data in connection with any inquiry, court order, or other legal or regulatory procedures which we would need to comply with;
- To affiliates, who will act as independent date controllers, joint controllers, or data processors (depending on the purpose for which the group entity receives the data) and who provide IT and system administration and other management or administration services;
- To establish or protect our legal rights, property or safety, or the rights, property or safety of others, or to defend against legal claims; and
- In connection with any reorganization, company acquisition, merger, restructuring, transfer of our business or assets, bankruptcy or insolvency, or change in the operational entity.
2.4 Public Disclosure
In principle, the Company will not disclose your personal data to the public, except as agreed under your contract or as required by applicable laws or orders.
3. How Do We Retain Personal Data?
3.1 Retention Period
While you are using the App, the Company will continue to retain the personal data of merchants and consumers for as long as needed for the purposes for which it was obtained. If you cancel your account, actively delete the information, or if the Company ceases operations for any reason, the Company will cease collecting your and the end consumers’ personal data in accordance with legal requirements, and delete the retained personal data or anonymize it.
4. What Rights Do You Have?
Under applicable data protection law, you have certain rights in relation to your personal data. Please note that many of these rights are not absolute and we may have grounds to not fully comply with your request to exercise them (for example, where we are (a) required or permitted by applicable law to process your personal data in a way that is incompatible with your request, or (b) able to rely on exemptions under applicable data protection law which entitle us to process your personal data in a way that is incompatible with your request). Where such circumstances apply, we will inform you when we respond to your request to exercise your rights.
4.1 Right to Request Access
You have the right to obtain specific information about the processing of your personal data, as well as copies of such personal data, free of charge.
4.2 Right to Rectification
You have the right to correct your personal data or supplement incomplete data without undue delay, if your personal data is inaccurate.
4.3 Request to Erasure
You may contact the Company to request the deletion of your personal data (also known as the "right to be forgotten") without undue delay on various grounds, such as where the personal data is no longer necessary for the purposes for which it was originally collected or processed.
4.4 Right to Withdraw Consent
Where we process your personal data based on consent, you have the right to withdraw consent at any time. However, this will not affect the lawfulness of any processing conducted based on consent before any such withdrawal. Furthermore, even in case of a withdrawal we may continue to use your personal data as permitted or required by law.
4.5 What we may need from you
We may need to request specific information from you to help us confirm your identity and to ensure your right to access your personal data or access someone else's personal data on their behalf (or to exercise any of the other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
4.6 How to Exercise Your Rights, and Responding to Your Requests
To exercise your rights under this section you can contact the Company using the contact methods provided at Section 7 in this Policy. We try to respond to all legitimate requests within one month although occasionally it could take us longer than a month; for example, if your request is particularly complex or if you have made a number of requests, this may be extended to an additional two months. To ensure security, the Company may first verify your identity before processing your request.
5. Where do we store personal data?
The Company provides the App across multiple countries and regions and data you provided to us may be transferred to, stored or processed outside of your country. In principle, we will store your personal data in Singapore and the United States. However, for statistical and analytical purposes, we may transfer your personal data to regions outside of Singapore and the United States. Nonetheless, we will ensure that your personal data is adequately protected as it is in the country or region where you are located and will use encryption in cross border data transfer.
6. Updates and Notifications to This Policy
The Company may revise the terms of this Policy from time to time as our privacy practices change, or as required by applicable legal or regulatory requirements, and such revisions will become part of this Policy. Where it is practicable the Company will notify you of any significant changes (such as if there are significant changes in the Company's service model, like changes to the purpose of personal data processing). In such cases, if you disagree with the Policy, or have objections to any changes or updates, you may choose to stop using the Company’s products and/or services or cancel your account. However, please be aware that any actions and activities you conducted before account cancellation or cessation of platform usage will still be governed by this Policy.
7. Contact Us
If you have any questions, comments, or suggestions regarding this Policy or our handling of your personal data (including any requests to exercise your legal rights), please contact us at flowautomationapp@gmail.com or reach out to customer service.
8. Important Term Definitions
8.1 You: Refers to our customers, whether free or paid registered merchant users of App and/or their directors, employees and/or authorized personnel.
8.2 Personal Data: Refers to various information recorded in paper, electronic, or other forms that can identify a specific natural person or reflect the activities of a specific natural person, either alone or in combination with other information.