FlowPost Privacy Policy

Last updated: July 13, 2026

FlowPost (“we”, “our”) is a Shopify app by AVOITS that sends transactional email through merchants’ own email providers via Shopify Flow.

Data we process

• Shop data: shop domain, plan/subscription status, and email provider settings you configure (SMTP host/user, API keys).
• Email logs: recipient address, subject, status, provider message id, and error messages for sends performed by the app.
• Session data: Shopify offline session tokens required to keep the embedded app authenticated.

How we use data

Data is used only to operate FlowPost: authenticate the merchant, send emails through the configured provider, enforce plan limits, and show delivery logs. We do not sell merchant or customer data.

Data retention & deletion

• Logs are retained according to the merchant’s plan log window, then may be removed.
• On app uninstall we remove settings for that shop. Shopify’s shop/redact compliance webhook triggers full shop data deletion (sessions, settings, logs).
• Customer redact / data request compliance webhooks are implemented so we can redact or report stored recipient emails in logs.

Third parties

Email content is transmitted to the merchant-selected provider (for example SMTP, Resend, SendGrid, Mailgun, Postmark, Google Workspace, Microsoft 365, or Amazon SES). Those providers process data under their own terms.

Contact

Questions about privacy: info@avoits.com