Privacy Policy

Who we are

ShopFlo is a software-as-a-service platform for automotive specialty shops (car audio, window tint, paint protection film, and vehicle wraps). ShopFlo is operated by TODD, a digital marketing agency based in Canada. References to “we,” “us,” and “our” mean ShopFlo / TODD.

What data we collect

• Account data. Email, name, shop name, role, and authentication credentials for shop owners, service writers, and technicians who sign in to ShopFlo.
• Business data uploaded by shops. Customers, vehicles, jobs, estimates, invoices, payments, photos and videos, SMS threads, inventory, purchase orders, suppliers, and warranties that shops create or upload while using the service.
• Customer data shops collect about their customers. Name, email address, phone number, vehicle information, service history, and communication records. Shops are the controllers of this data; we are the processor.
• Payment information. Card payments are handled by Stripe. We receive payment identifiers and metadata; we do not store full card numbers.
• Communications. SMS messages sent or received through ShopFlo are routed via Twilio. Transactional email is sent via Resend.
• Usage analytics. Server logs, page views, feature usage, error reports, IP address, and device/browser metadata to operate and improve the service.

How we use data

• To operate and provide the service to shops and their users.
• To send transactional SMS and email on behalf of shops (estimate approvals, deposit receipts, job-ready notifications, review requests, warranty links).
• To prevent abuse, fraud, and unauthorized access.
• To comply with legal obligations and respond to lawful requests.
• To improve product quality, reliability, and performance.

Integrations and data sharing

ShopFlo connects to third-party services on a shop-by-shop, opt-in basis. We only share the data necessary for the integration to function, and only with the third party the shop has authorized.

• QuickBooks Online (Intuit). When a shop connects QuickBooks Online, ShopFlo sends that shop’s invoices, payments received, customer records, and bills (accounts payable) to the shop’s QBO company file so the shop’s accountant has a single source of truth. The sync is one-way (ShopFlo → QuickBooks). We do not pull QBO data back into ShopFlo, we do not share QBO data between shops, and we do not use QBO data for any purpose other than fulfilling the connected shop’s sync. A shop can disconnect QuickBooks at any time from Settings, which revokes our OAuth token and stops further sync.
• Shopify.When a shop connects Shopify, ShopFlo syncs products, customers, and orders bidirectionally with that shop’s Shopify store only. Data is never shared with other shops or other Shopify stores.
• Stripe. Handles card and terminal payments on behalf of shops. We receive tokens, payment intents, and payout metadata, not raw card numbers.
• Twilio.Sends and receives SMS on behalf of shops using the shop’s provisioned phone number.
• Resend. Sends transactional email on behalf of shops and ShopFlo.
• Supabase / Vercel.Underlying infrastructure providers used to host ShopFlo’s database, file storage, and application code.

We do not sell personal information, and we do not share data between shops. Every shop is a separate tenant.

Multi-tenancy isolation

ShopFlo is a multi-tenant SaaS platform. Every record stored in ShopFlo is scoped to a single shop via a shop identifier, and access is enforced both at the database level (row-level security policies) and in application code. Shops never see each other’s data.

Data retention

We retain shop and customer data for the life of the account. After an account is deleted, backups containing the data may persist for up to 90 days before being permanently purged for disaster-recovery reasons. Legal, tax, or accounting obligations may require longer retention of specific records.

Your rights

You can request a copy of your data, correction of inaccurate data, or deletion of your data by emailing us at the address below. If you are an end customer of a shop that uses ShopFlo, please contact that shop first — the shop is the controller of your data.

Children

ShopFlo is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

Security

All traffic to ShopFlo is served over TLS. Data is encrypted at rest by our infrastructure providers. Access within each shop is governed by role-based permissions (owner, service writer, technician). OAuth tokens for connected third parties are stored encrypted and used only to perform the connected actions.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email to account owners or via an in-product notice. Continued use of ShopFlo after the effective date of an update constitutes acceptance of the updated policy.

Contact

Questions about this policy, data access, or deletion requests can be sent to obviousdecisiondesign@gmail.com.