Privacy Policy

Overview

This Privacy Policy explains how PiFlow Inc., operating publicly as PiFlow ("we", "us", or "our"), collects, uses, discloses, and protects personal information when you visit our website, contact us, download a resource, join our email list, or schedule a call.

This policy is written for the current PiFlow marketing website and related service inquiries. If we add new analytics, advertising pixels, client portal behavior, or product features, we will update this policy.

Information We Collect

We collect information you provide directly to us and limited technical information needed to operate the website.

Contact form data: name, email address, company or project details if provided, and message content.
Lead magnet delivery data: name, email address, selected resource, source URL, submission timestamp, and related delivery metadata when you request a resource.
Email marketing consent data: consent status, consent copy shown at signup, source URL, timestamp, selected resource, and related subscription metadata if you separately choose to receive future PiFlow resources or service updates.
Scheduling data: if you book a call via Calendly, Calendly may collect contact details, scheduling metadata, and any notes you provide.
Project inquiry data: information you choose to share about your idea, app, codebase, business, budget, timeline, or technical needs.
Theme support data: your name, email address, .myshopify.com store URL, problem description, optional theme version and impact level, and an optional PNG, JPEG, or WebP screenshot when you request support for a PiFlow Shopify theme.
Basic technical data: hosting and security providers may automatically receive log data such as IP address, user agent, requested URLs, timestamps, and error/debugging metadata.
Website analytics data: Vercel Analytics may process pageviews, referring pages, device or browser characteristics, approximate location, and privacy-safe interaction events such as service-path selection, content CTA clicks, pricing selection, Calendly open or scheduled status, and successful form or resource delivery status.
Cookies and similar technologies: Calendly and basic site infrastructure may use cookies or similar technologies to provide scheduling functionality and operate the site.

How We Use Information

We use personal information for the purposes described below:

Respond to inquiries and provide requested information.
Investigate, respond to, and maintain a support history for Shopify theme questions and reported defects.
Schedule and manage calls or appointments.
Send requested resources and transactional follow-up related to that request.
Send marketing or commercial emails only where we have consent or another lawful basis, and provide unsubscribe options where required.
Qualify project fit, prepare scopes, proposals, SOWs, invoices, subscription confirmations, applicable tax records, and onboarding requests.
Configure and administer third-party hosting, database, monitoring, email, source-control, payment, AI, and infrastructure services for scoped engagements where PiFlow manages deployment or support.
Operate, maintain, debug, secure, and improve the website.
Prevent spam, misuse, unauthorized access, and security incidents.
Maintain business records and comply with legal, tax, accounting, and contractual obligations.

How We Share Information

We do not sell personal information.

We may share information with service providers that help us run the website, communicate with you, schedule calls, process inquiries, deliver resources, or provide scoped services. These providers process information for us or according to their own terms and privacy policies.

For managed hosting and support, PiFlow may configure and administer third-party platforms on a client's behalf. Those vendors, not PiFlow, operate the underlying hosting, database, storage, email, monitoring, payment, source-control, AI, domain, and infrastructure services.

Email delivery and audience management: Resend.
Theme support delivery: Resend processes support messages and optional screenshots so PiFlow can notify the support mailbox and send the merchant a transactional confirmation.
Scheduling: Calendly.
Website hosting, deployment, logs, and infrastructure: Vercel and related infrastructure providers.
Website traffic and interaction analytics: Vercel Analytics. PiFlow does not intentionally send names, email addresses, message content, form values, or Calendly event URIs in custom analytics events.
Scoped project operations: tools such as GitHub, Supabase, Sentry, Stripe, Resend, OpenAI or other AI providers, domain registrars, Notion, or similar providers if they are used for a scoped engagement or business process.
Legal or business reasons: we may disclose information if required by law, to protect rights and security, to enforce agreements, or as part of a business transfer or reorganization.

Email Marketing and Unsubscribing

Requesting a resource does not require consenting to future marketing. If you separately join our list or otherwise consent to receive updates, we may send you commercial emails about PiFlow services, resources, and related content.

You can unsubscribe from marketing emails using the unsubscribe link in the email or by contacting us. We may still send transactional or service-related messages, such as replies to your inquiry, scheduling messages, invoices, SOW coordination, or support communications.

Cookies and Tracking

We do not currently run dedicated advertising retargeting pixels on this site.

We use Vercel Analytics to understand aggregate traffic, referrals, device patterns, content use, and a limited set of conversion interactions. Custom event properties are restricted to non-personal context such as page path, placement, service segment, resource identifier, or successful action status.

Calendly may set cookies or use similar technologies to provide scheduling functionality. Hosting and security tools may also use logs or technical identifiers needed to operate and protect the website.

Data Retention

PiFlow Inc. keeps personal information only as long as reasonably needed for the purposes described in this policy, including responding to you, maintaining business records, preserving consent or unsubscribe records, resolving disputes, enforcing agreements, and meeting legal, tax, accounting, or security obligations.

Theme support screenshots are processed transiently by the website and forwarded to the support mailbox through Resend; PiFlow does not create permanent application storage for those files. Support messages, screenshots, and related provider records may remain in the support mailbox and Resend records for as long as reasonably needed to investigate, respond, preserve support history, and meet legal or security obligations.

If you ask us to delete information, we will make a reasonable effort to do so unless we need to keep it for legitimate business, legal, security, or contractual reasons.

Security

We use reasonable administrative, technical, and organizational safeguards to protect personal information from loss, misuse, unauthorized access, disclosure, alteration, and destruction.

No method of transmission or storage is completely secure. You should avoid sending highly sensitive credentials, regulated health information, payment card numbers, or unnecessary confidential data through ordinary contact forms or email.

Do not include Shopify passwords, API keys, staff invitations, customer exports, payment-card data, or other unnecessary confidential information in a theme support request or screenshot.

International Processing

PiFlow is based in Canada, but our service providers may process or store information in Canada, the United States, or other locations where they operate.

When information is processed outside your province, state, or country, it may be subject to the laws of that location, including lawful access by courts, governments, or regulators.

Your Choices and Rights

You may contact us to request access to, correction of, or deletion of personal information you have provided to us, subject to legal and business record limits.

You may also withdraw consent for marketing emails by using an unsubscribe link or contacting us. Withdrawing consent does not affect processing that occurred before withdrawal or messages we need to send for transactional or service-related reasons.

Children

This website is intended for business users and is not directed to children. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date indicates when changes were made.

Contact

If you have questions about this Privacy Policy, our data practices, or an access/correction request, contact PiFlow Inc.:

Email: contact@piflow.ca