Privacy Policy — Theme Flow

Last updated: August 19, 2026

Theme Flow ("the app") is a Shopify app that lets merchants schedule a theme to automatically go live at a chosen future date and time. This policy explains what information the app collects, how it's used, and how you can contact us with questions.

Information we collect through Shopify's APIs

When you install Theme Flow, we collect and store, on a per-store basis:

• Your store's myshopify.com domain
• An OAuth access token issued by Shopify, used only to make API calls to your store on your behalf
• The list of themes on your store (theme ID, name, and publish status), fetched at the time you create a schedule
• Your store's configured timezone, used to display and calculate schedule times correctly

Information we collect directly from you

We do not ask you to fill out any forms or provide contact details. The only information you provide directly is what you enter to create a schedule: the theme you choose, and the date, time, and timezone you want it published.

If you subscribe to our paid plan, billing is handled entirely by Shopify's Billing API — we never collect or store your payment details directly.

Information we collect from your customers

None. Theme Flow does not run any code on your storefront, does not use cookies or tracking technologies, and never accesses your customers' personal information, orders, or browsing activity.

How we use the information we collect

We use the information described above only to:

• Authenticate with your store's Admin API
• Publish your chosen theme at the date and time you scheduled
• Show you the status of your scheduled, published, and failed publishes
• Check and enforce your plan's usage limits, and manage your subscription via Shopify Billing

We do not sell, rent, or share this information with third parties, and we do not use it for advertising or marketing purposes.

Automated logs

Our hosting provider generates standard server logs (such as request timestamps and error messages) for operating and debugging the app. These logs are used only to keep the app running reliably and are not used for any other purpose.

Data retention

• Schedule records are kept until you cancel them or they complete, and you can delete any pending schedule at any time.
• If you uninstall the app, your store's access token is invalidated immediately.
• All of your store's data (schedule records and shop record) is permanently deleted from our database within 48 hours of uninstalling, in line with Shopify's data protection requirements.

Data storage location

The app's servers run in the United States. Its database is hosted on infrastructure located in the Asia-Pacific region (Singapore). We are not established in the European Economic Area or United Kingdom.

Your rights under GDPR and other privacy laws

Theme Flow supports Shopify's mandatory privacy webhooks (customers/data_request, customers/redact, and shop/redact). Because we never collect or store any personal data about your customers, there is no customer data for us to return or delete in response to a data request — these webhooks are acknowledged automatically. Your store's own data is deleted as described above.

Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

Contact us

If you have any questions about this privacy policy or how Theme Flow handles your data, contact us at admin@ynott.in.