IntentFlow Ads

PRIVACY

Privacy Policy

Last updated: September 12, 2026

IntentFlow Ads (the “App”) is operated by 丹 王, an independent developer based in Chengdu, Sichuan, China (“we”, “us”). This policy explains what information the App collects, how it is used, the service providers involved, and the choices available to merchants.

1. Information we collect

  • Shop information: the shop domain, granted API scopes, and an access token used to authenticate Shopify API calls.
  • Product information: product and variant identifiers, titles, handles, availability, images, and related storefront URLs, used to evaluate registered Shopify product landing pages.
  • Information provided by merchants: landing-page URLs, optional platform and ad labels, CPC and estimated daily-click inputs, and recorded corrective actions.
  • Monitoring results: HTTP status, redirect destination, availability signals, scan timestamps, issue duration, and technical error details.
  • Billing information: subscription status returned by Shopify. Shopify handles payment details; we do not store card information.

We do not request Shopify customer data through the Admin API or retain Shopify customer personal data. Shopify's mandatory compliance webhooks may include a customer identifier; it is processed only to acknowledge the request and is not stored or logged. We do not connect to Meta, TikTok, or Google Ads accounts and do not access actual ad spend, CPC, clicks, conversions, or ROAS from those platforms.

2. How we use information

  • Authenticate the shop and provide the embedded application.
  • Scan registered landing pages for errors, unavailable products or variants, and unexpected redirects.
  • Calculate spend-at-risk estimates from merchant-provided CPC and daily-click values.
  • Retain issue history, recorded actions, and verification results.
  • Maintain subscription status, secure the service, diagnose errors, and improve reliability.

We do not sell personal information and do not use merchant data to serve advertising.

3. Storage and security

  • Shopify access tokens are encrypted at rest using AES-256-GCM and are not intentionally written to logs in plain text.
  • Data is transmitted over HTTPS.
  • Production access is limited to personnel and providers who need it to operate the App.

4. Service providers

  • Shopify: authentication, Admin API access, embedded-app delivery, and subscription billing.
  • Vercel Inc.: hosting for the embedded frontend and server routes.
  • Railway Corporation: backend API and database hosting for encrypted sessions, monitoring records, and landing-page scans.

Information may also be disclosed when required by law or necessary to protect the security and integrity of the service.

5. Retention and deletion

Shop configuration and monitoring records are retained while the App is installed and as needed to provide the service. Uninstalling the App initiates deletion of stored sessions and shop data. We honor Shopify's mandatory data request and redaction webhooks; shop-related data is deleted within 30 days of a valid redaction request.

Under our current hosting plans, Railway retains backend operational logs for 7 days and Vercel retains runtime logs for 1 hour. These logs may contain shop domains, request paths, and technical event or error details, but we do not intentionally log access tokens or Shopify customer identifiers.

6. Merchant rights

Depending on applicable law, merchants may request access to, correction of, or deletion of their personal information. Email us to submit a request. Because the App does not store end-customer personal data, customer requests received through Shopify are confirmed and processed through Shopify's compliance webhook flow.

7. International processing

All application data that we store and process is handled in the United States: Railway (US West, California) hosts the application backend and database, and Vercel (Washington, D.C., region iad1) hosts the application frontend and serverless functions. Apart from these listed United States locations, we do not transfer application data to another country or region.

8. Contact

Operator: 丹 王, independent developer
Location: Chengdu, Sichuan, China
Email: support@intentflowapp.com