Privacy Policy

CapFlow Booking App ("we", "our", or "the App") is a booking and reservation management system that integrates with Shopify stores. This privacy policy explains how we collect, use, and protect information when you use our App.

Information We Collect

When integrated with a Shopify store, the App accesses and stores:

• Customer information: Name and email address associated with bookings
• Booking data: Reservation dates, times, party size, and service selections
• Order information: Order ID, payment status, and line items from Shopify
• Product data: Product and variant information used for booking services

How We Use Information

We use the collected information to:

• Manage reservations and track capacity availability
• Process bookings and connect them to Shopify orders
• Enable merchants to view and manage customer bookings
• Facilitate check-in and attendance tracking
• Generate booking reports and analytics for merchants

Website Analytics

Our public website uses Vercel Web Analytics to count visits without cookies or cross-site tracking. If you choose “Allow analytics,” we also use Google Analytics to understand which pages and campaigns lead merchants to our Shopify App Store listing. Google Analytics is not loaded until you consent, and you can change your choice at any time using “Analytics preferences” in the website footer.

Product Analytics

We use PostHog, hosted in the European Union, to understand how merchants use the App and where setup may fail. We record operational events such as installation, app opens, completed setup steps, plan changes, and uninstallations, together with the store domain and current plan. We do not send customer names, email addresses, booking details, or session recordings to PostHog.

Data Storage and Security

All data is stored on secure servers hosted by Fly.io in the European Union. We implement industry-standard security measures including encrypted connections (HTTPS), secure database access, and regular security updates.

Data Sharing

We do not sell or rent customer data. We use service providers only where needed to operate, secure, and measure the App and website, including Shopify, Fly.io, Vercel, PostHog, and, when website visitors consent, Google Analytics. These providers process data under their own contractual and security obligations. Booking data is accessible only to the merchant who operates the Shopify store where the App is installed and authorized CapFlow personnel when support or operations require it.

Data Retention

Booking and customer data is retained for as long as the App remains installed on the merchant's store, plus a reasonable period for business records (typically 2 years). When the App is uninstalled, associated data is deleted within 30 days.

GDPR Compliance

As data is stored in the EU and we process data for EU-based merchants, we comply with the General Data Protection Regulation (GDPR). Merchants act as data controllers for their customer data, while we act as a data processor.

Your Rights

If you are a customer who has made a booking through a store using this App, you may request access to, correction of, or deletion of your personal data by contacting the merchant directly. The merchant can fulfill these requests through the App's admin interface.

Changes to This Policy

We may update this privacy policy from time to time. We will notify merchants of significant changes through the App or via email.

Contact

For questions about this privacy policy or data practices, please contact us at hello@tinyagency.io.