Dollflow Privacy Policy
Last updated: September 3, 2026
Dollflow provides appointment-booking tools for Shopify merchants. This policy explains how Dollflow processes information when a merchant installs the app or a customer books an appointment.
Information we process
We process Shopify shop and app-session information, merchant settings, services, employee schedules, appointment details, and customer information submitted with a booking, such as name, email address, telephone number, and booking notes.
Google Calendar data
If a merchant connects Google Calendar, Dollflow accesses Google Calendar data and OAuth tokens only to check availability and create, update, or remove appointment events requested by the merchant. Google user data may be processed by our infrastructure providers, Fly.io for application hosting and Supabase for secure database storage, solely as necessary to operate these features. We do not share Google user data with advertisers, data brokers, or other unrelated third parties, and we do not sell it or use it for advertising. We may disclose information when required by law or necessary to prevent fraud, abuse, or security threats. Our use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.
How information is used
Information is used to operate the booking service, calculate availability, prevent conflicting bookings, synchronize appointments, support merchants, maintain security, and comply with legal obligations.
Storage and sharing
We use service providers only as necessary to operate Dollflow, including Shopify for the commerce platform, Fly.io for application hosting, Supabase for database hosting, Google when Calendar is connected, Resend for email delivery, and Twilio when optional SMS reminders are enabled. These providers process information under their own terms and safeguards. We do not sell personal information.
Retention and choices
Information is retained while a merchant uses Dollflow and only as long afterward as reasonably needed for security, dispute resolution, and legal obligations. Shopify privacy webhooks are honored for customer access and deletion requests. Shop data is deleted after Shopify sends its shop-redaction request following uninstall. Merchants may disconnect Google Calendar at any time and may request access, correction, or deletion.
Merchant and customer responsibilities
The Shopify merchant controls the booking information submitted by its customers. Customers should first contact the merchant with questions about an appointment or requests concerning their booking data. Dollflow supports merchants in responding to applicable privacy requests.
Security
We use access controls, encrypted transport, encrypted Google OAuth tokens, and operational safeguards designed to protect information. No online service can guarantee absolute security.
International processing
Service providers may process information in countries other than where a merchant or customer is located. Where required, appropriate contractual and legal safeguards are used.
Contact
For privacy questions or data requests, email greatbigab@gmail.com. We may need to verify a request before acting on it.