Privacy
Last updated 17 September 2026
Floristflow is a Shopify app for florists. It reads the orders in your shop so it can print tickets and organise your delivery run. This page says exactly what that means.
What the app reads
When you install Floristflow it is granted access to your orders and customers. It brings in the orders from the 60 days before you installed, so deliveries you had already booked show up, and every order after that. From those we use:
- Order details — number, date, line items, totals, payment status, and the order’s custom attributes
- Customer and recipient details — name, email, phone and the delivery address, because these are printed on the ticket the driver carries
- What you type into the app — card message, flower notes, colours, delivery instructions, and your shop’s settings
We keep only what the app uses. The IP address and browser an order was placed from, the pages the shopper came from, the links to their order status page and checkout, and the card summary on its payment details (the card’s first six and last four digits) are dropped when the order arrives.
Shopify never gives apps full card numbers, so Floristflow never sees them.
Who looked at what
Whenever the app shows someone on your staff a customer’s details, Floristflow records it: the orders list and a search, a day’s run, an order’s details, a draft order’s details, a privacy request, and a ticket someone opens or prints. Each record holds which orders were shown and when, and which Shopify user saw them — by user id only, with no names or email addresses. Records are kept for 12 months, and uninstalling deletes them.
Where it is stored
In a MongoDB Atlas database operated on our behalf, and in the app’s own hosting on Vercel. Shops share the database, and every query the app makes names one shop: the only way it can reach order data at all is through that check, so one merchant cannot see another’s orders.
Who else sees it
- PrintNode
- The service that carries a ticket from the app to your printer. It receives the rendered ticket, and a ticket prints what the bench and the driver need: the recipient’s name, company, phone and address; the card message, the order’s note and the delivery instructions; what to make — the items with their quantities and prices, the flower notes and the colours; the delivery or pickup date, day and time window; the buyer’s own name, phone, email and Shopify customer number; and the order’s number, date, totals and how it was paid. It is sent using the API key you enter in Settings, to the printer you choose.
- Shopify
- When you edit an order’s details in Floristflow, the change is written back to Shopify so your Shopify admin agrees with the ticket.
We do not sell data, and we do not share it with anyone for advertising.
Your customers on your storefront
If you use the delivery scheduler or the zone banner on your website, a shopper’s postal code is sent to us to answer whether you deliver to that area. It is used for that answer and not stored. The scheduler and the banner remember it in the shopper’s own browser for the rest of their visit, and nowhere else.
This website
floristflow.app uses Google Analytics to count visits, with its advertising features switched off. For visitors in the EU and EEA, the UK and Switzerland it never sets analytics cookies. To stop one visitor filling the list below, the signup form counts signups from each network for ten minutes, in the server’s memory, by a scrambled form of the IP address rather than the address itself; it is never saved. If you enter an email address to hear about updates, we store it in our own database with the date you signed up and the date you last did, and Resend sends us a notification email containing it. It is used only to tell you about Floristflow, and it stays on the list until you ask us to take it off: write to trey@fathomdev.io and we delete it.
How long it is kept
Personal details are removed 90 days after an order. That covers customer and recipient names, email, phone, addresses, card messages, notes, and the technical details above. The 90 days count from whichever is later: when the order was placed, or the day it was due. A pre-order booked weeks ahead keeps its details until 90 days after its delivery.
After that, the app keeps only what describes the sale itself — the order number, dates, delivery or pickup, items and totals — so your run history still adds up. The full order stays in your Shopify admin. This happens automatically every day; you do not have to ask.
Uninstalling deletes everything. Shopify notifies us 48 hours after an app is removed, and we erase everything held for that shop when that notice arrives.
Requests about a specific person
Shoppers make these through the merchant they bought from, and Shopify forwards them to us. We act on them:
- A request for a copy of someone’s data appears on the Privacy requests page in Floristflow, with what the app holds about them and the date a reply is due, so the merchant can answer it.
- A request to erase someone removes the same personal details from the orders concerned straight away, without waiting for the 90 days, and keeps the sale itself so the shop’s own records stay intact.
The shopper’s email and customer id come off a request 90 days after it arrives, and the request itself is deleted after 12 months. An erasure still being carried out keeps the customer id it needs to finish, and its email comes off at 90 days like any other.
You can also write to us directly at trey@fathomdev.io.
Changes
If what the app does with data changes, this page changes with it and the date above is updated.