Privacy Policy

FLOWSTOCK ("FlowStock", "we") is operated by ByteHouse LLC. FlowStock connects online stores to their suppliers: it keeps product data and stock levels in the store up to date and passes orders to the supplier. Questions about this policy or your data: hello@flowstock.so.

Account data: name, email address and login details for the FlowStock dashboard (app.flowstock.so), including the basic profile Google shares when you sign in with Google (name, email, profile picture).

Store data (merchants): the shop domain and an access token for your Shopify or WooCommerce store, your products, stock levels, prices, and the orders FlowStock routes to suppliers, including the shipping details needed to deliver them.

Supplier data (suppliers): your catalogue, prices and stock, received through your API, a pushed feed, or a Google Sheet you connect.

Billing data: subscription status and invoices. Card details are handled by Stripe and never reach our servers.

Website data: flowstock.so uses an analytics/visitor tracker (Apollo.io) that records visits and may identify the company you visit from.

Suppliers can use a Google Sheet as their stock list. When you connect one, you sign in with Google and choose the sheet in Google's file picker. FlowStock asks only for the drive.file permission, which lets it open only the files you choose in that picker. It cannot see or open any other file in your Google Drive.

What we access: the cell contents of the sheet you chose: product code (SKU), size, price, quantity, and, if present, title, brand, tags and photo link.

How we use it: we read the sheet about every 15 minutes to update your products and stock in the stores you supply. When one of your pairs sells, FlowStock lowers the quantity cell of that row by the number sold, so you do not sell the same pair twice. FlowStock never changes any other cell, never deletes rows, and never edits formulas.

Storage: the Google access and refresh tokens are stored encrypted in our database vault (Supabase, EU region) and are only used by our servers for the reading and updating described above. Sheet data is stored as product and stock records in our database for as long as you are connected.

Sharing: stock, price and product data from your sheet is shown to the stores you have chosen to supply, because that is the service. We do not sell Google user data, do not use it for advertising, and do not transfer it to anyone else except the infrastructure providers listed below that process it on our behalf, or where the law requires it.

No human access, no AI training: our staff do not read your sheet's contents unless you ask us to for support, it is needed for security (for example, investigating abuse), or the law requires it. We do not use Google user data to develop, improve or train generalised artificial intelligence or machine learning models.

FlowStock's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access and deletion: you can remove FlowStock's access at any time at myaccount.google.com/permissions. After that we can no longer read or update the sheet. To have the stored tokens and the data imported from your sheet deleted, email hello@flowstock.so; we delete them within 30 days.

Supabase (database, file storage and server functions, EU region), Cloudflare (sync workers), Render (hosting of the dashboard and website), Resend (transactional email), Stripe (payments), Google (Sheets API, sign-in), and Shopify / WooCommerce (your store platform). Each processes data only to provide its service to us.

Account, store and supplier data is kept while your account is active and deleted within 30 days after you close it, except invoices, which we keep as long as tax law requires. Server logs are deleted after 7 days.

You can ask for a copy of your data, its correction or deletion, or object to its processing, by emailing hello@flowstock.so. If you are in the EU/EEA you may also complain to your data protection authority.

We will update the date above when this policy changes, and tell connected users by email about material changes.