Privacy Policy
Last updated: July 8, 2026
Flowsplus (“we”, “us”, or “our”) operates the Product Options & Variants BigCommerce app (“the App”). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.
1. Information We Collect
From the BigCommerce OAuth flow
When you install the App, BigCommerce shares the following with us:
- Your store’s store hash (a unique identifier for your BigCommerce store)
- An access token that allows the App to read and write to your store on your behalf
- The user ID and email address of the store owner and any staff users who open the App
From your use of the App
As you use the App, we store:
- The Option Sets you create — element types, labels, pricing rules, conditional logic, and applied products
- Analytics data — which option sets are viewed and which product pages they appear on, used to power the Analytics dashboard
- Your App Settings — currency, design preferences, and other configuration
From your storefront visitors
The App’s storefront script runs on your product pages. It reads:
- The product ID of the page being viewed, to determine which option set to load
- Basic customer context (whether the customer is logged in, their customer group ID, and a country estimate from browser language headers) — used for targeting rules only
We do not collect names, email addresses, payment details, or any personally identifiable information from your storefront visitors. If your Option Sets use a File Upload element, files your customers upload are stored on your behalf to attach to their order.
From your subscription
If you subscribe to a paid plan, your payment is handled entirely by our billing provider, Polar — we never receive or store your card details. We only receive your subscription status and plan (e.g., which plan you’re on and whether it’s active).
2. How We Use Your Information
| Data | Purpose |
|---|---|
| Store hash + access token | Authenticating API calls to BigCommerce on your behalf |
| User IDs and emails | Managing multi-user access and sending support communications |
| Option Set configuration | Providing the core app service |
| Analytics events | Powering your Analytics dashboard |
| Storefront visitor context | Evaluating customer and country targeting rules |
We do not sell, rent, or share your information with third parties for marketing purposes.
3. Third-Party Services
The App uses the following third-party services to function:
- BigCommerce — the platform the App is built on. Your store data is subject to BigCommerce’s Privacy Policy
- Vercel — our hosting provider. Application code and API requests run on Vercel’s infrastructure
- Neon / PostgreSQL — our database provider, used to store your Option Set configuration
- Amazon Web Services (S3) — stores uploaded images, custom fonts, and customer-uploaded files (from File Upload elements)
- Polar — our billing provider, used to process subscription payments. Card details go directly to Polar; we never see or store them
- Resend — used to send emails when you set up an Automation that emails your team
4. Data Retention
We retain your data for as long as you have the App installed. If you uninstall the App, your data is retained for 90 days to support accidental reinstall recovery, then permanently deleted.
You may request immediate deletion of your data by emailing support@feedbackflowhq.com.
5. Security
We use industry-standard measures to protect your data:
- All data is transmitted over HTTPS/TLS
- Access tokens are stored encrypted at rest
- Sessions are managed with signed JWTs — we do not rely on persistent third-party cookies
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data
- Restrict or object to certain processing
- Portability — receive your data in a structured format
To exercise any of these rights, contact us at support@feedbackflowhq.com. We will respond within 30 days.
7. Children’s Privacy
The App is not directed at children under 13. We do not knowingly collect personal information from children.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via the email address associated with your BigCommerce account. The “Last updated” date at the top of this page reflects the most recent revision.
9. Contact
If you have questions or concerns about this Privacy Policy, contact us at:
Email: support@feedbackflowhq.com