Privacy policy

Last updated 25 October 2026

Afterflow delivers digital products and sends follow-up emails for Shopify stores. This page explains what data Afterflow handles, why, and what you can do about it. Questions go to antondogena@gmail.com.

Who this is about

Sellers are the stores that use Afterflow. Customers are the people who buy from those stores. For customer data, the store is in charge of it and Afterflow processes it on the store’s behalf, only to deliver their purchases and send the emails the store has switched on.

What we collect from sellers

• Account details: name, email, store address and, if you sign up on our website, a password (stored as a one-way hash).
• Store settings: brand name, logo, support email, email texts, flows and the files you upload.
• Billing status. Payments are handled by Stripe or, if you use the Shopify app, by Shopify. We never see your full card number.
• If you connect Klaviyo, your private API key, which we use only to send events to your own Klaviyo account.

What we process about customers

• From each paid Shopify order: order number, email address, first name, what was bought, the amount, and whether the customer agreed to marketing at checkout.
• What happens after: which emails were sent, whether they were opened, and when files were downloaded.
• Unsubscribes, so we never email someone who opted out.

Review requests and product offers only go to customers who accepted marketing at checkout. Every follow-up email has an unsubscribe link.

What we don’t do

• We don’t sell data or share it with advertisers.
• We don’t use one store’s customer data for another store.
• We don’t track customers across other websites.

Who helps us run Afterflow

• Render, which hosts the app and its database in Frankfurt, Germany.
• Resend, which sends the emails, from the EU.
• Stripe, which handles payments for sellers who sign up on our website.
• Shopify, which sends us order data and, for the Shopify app, handles billing.
• Klaviyo, only if a seller connects it, and only for that seller’s events.
• Meta, which measures visits to this website so we know which ads work. It isn’t used in the dashboard, in the Shopify app or in customer emails.

How long we keep data

Customer orders, with their downloads and email history, are deleted automatically two years after the purchase. Seller data is kept while the account is open. When a store uninstalls the Shopify app, deliveries stop at once, and Shopify asks us to erase the store’s data 48 hours later, which we do. When a customer asks a store to delete their data, Shopify tells us and we delete their orders, emails and downloads. Sellers who signed up on our website can ask us to delete their account at any time.

Your rights

You can ask to see, correct or delete your data. Customers should contact the store they bought from; the store can pass the request on to us, and Shopify does this automatically for stores using the app. Sellers can write to antondogena@gmail.com. If you’re in the EU, you can also complain to your data protection authority.

Security

All traffic uses HTTPS. Passwords are hashed, Shopify access tokens are stored encrypted, and every request from Shopify is checked against its signature.

Changes

If this policy changes in a way that matters, we’ll update the date above and tell sellers by email.