Terms of Service
Effective date: 22 October 2026
These terms govern the use of ShopFlow (shopflow.studio), provided by KLAVTAR Sp. z o.o., ul. Siewna 15, lok. C002, 94-250 Łódź, Poland (KRS 0000977627, NIP 7272859792) ("ShopFlow", "we"). By creating an account or installing the ShopFlow app in a store, the merchant ("you") accepts these terms.
1. The service
ShopFlow helps merchants manage listings, products, orders, fulfillment and analytics for their Etsy, Heartysan and Shopify stores. Some features are in beta and may change.
2. Your account
You are responsible for your account, your team members and the accuracy of the data you connect. Keep credentials confidential and use a strong password. You may only connect stores you are authorised to manage.
3. Acceptable use
Do not use ShopFlow to break the law, infringe others' rights, violate the terms of your sales channels (Etsy, Shopify), or attempt to access data of other accounts.
4. Fees
Paid features and AI credits are charged as shown in the app. Prices may change with prior notice.
5. Data protection
Our Privacy Policy describes how we process personal data. Where we process personal data of your customers on your behalf, the Data Processing Addendum below applies and forms part of these terms.
6. Liability
The service is provided "as is". To the extent permitted by law, our total liability is limited to the fees you paid us in the 12 months before the claim. Nothing limits liability that cannot be limited by law.
7. Termination
You may stop using ShopFlow and uninstall the app at any time. We may suspend accounts that breach these terms. After termination, data is deleted as described in the Privacy Policy.
8. Law
These terms are governed by Polish law. Courts competent for our registered office have jurisdiction, unless mandatory consumer law provides otherwise.
Data Processing Addendum
This Data Processing Addendum ("DPA") applies when ShopFlow processes personal data of the merchant's customers on behalf of the merchant, in accordance with Article 28 of the GDPR.
1. Roles. The merchant is the controller; KLAVTAR Sp. z o.o. is the processor.
2. Subject matter and duration. Processing of order and customer data needed to provide ShopFlow's order management and fulfillment features, for as long as the merchant uses ShopFlow and until deletion under clause 8.
3. Categories of data and data subjects. Data subjects: the merchant's customers. Data: name, shipping address, phone number, order contents and messages. No special categories of data. Customer email addresses are not requested from Shopify.
4. Instructions. We process personal data only on the merchant's documented instructions, which are the merchant's use and configuration of ShopFlow. We will inform the merchant if an instruction appears to infringe data protection law.
5. Confidentiality. Persons authorised to process the data are bound by confidentiality.
6. Security. We implement the technical and organisational measures described in our Security Policy, including encryption in transit and at rest, access control, access logging, encrypted backups and incident response.
7. Sub-processors. The merchant authorises the sub-processors listed in the Privacy Policy. We impose equivalent data protection obligations on them and will notify merchants of changes in advance, giving the merchant the opportunity to object.
8. Retention and deletion. Customer personal data is deleted automatically 90 days after delivery or cancellation (120 days after shipment if delivery is not confirmed), on a customers/redact request, and with all store data on a shop/redact request or account closure.
9. Assistance. We assist the merchant in responding to data subject requests (including Shopify customers/data_request) and with security, breach notification and impact assessments, taking into account the nature of processing.
10. Personal data breaches. We notify the merchant without undue delay, and in any case within 72 hours of becoming aware of a breach affecting their customers' data, with the information available.
11. International transfers. Transfers outside the EEA are covered by Standard Contractual Clauses or an adequacy decision.
12. Audits. We make available information necessary to demonstrate compliance with this DPA and respond to reasonable audit requests.
Contact: klavtarlab@gmail.com