Privacy Policy

MakerFlow helps makers and small product businesses track components, products, production, purchasing and stock, and keep inventory synchronized with the places they sell. This policy applies to the MakerFlow application, our website, and the integrations you choose to authorize.

If you use MakerFlow as part of a business, you are generally the controller of the business and customer information you bring into MakerFlow, and we process it to provide the service to you.

Account and business information

• Your name and email address
• Login and account information, including authentication events and, if you choose it, sign-in through Google or Apple
• Business and workspace information, such as workspace name and team membership
• Support communications you send to us
• Subscription and account status information

MakerFlow operational data

• Products and SKUs
• Components and raw materials
• Product/component relationships (bills of materials)
• Inventory quantities and inventory adjustments
• Production records
• Purchasing and receiving records
• Sales records, and returns or reversals where applicable
• Channel mappings and synchronization records
• Integration status and operational logs

Connected-platform information

When you connect Shopify, Etsy, Square, Faire or another supported service, MakerFlow receives information through that service’s API that is necessary to provide the integration. This may include:

• Store or account identifiers
• Products and listings, SKUs and variant information
• Inventory quantities and, where applicable, locations
• Orders, order line items, quantities and order identifiers
• Transaction and status information necessary for synchronization
• Authorization credentials or tokens necessary to maintain the connection

Customer and order information

Some connected platforms provide limited information concerning your customers as part of order data. For Shopify specifically, MakerFlow may process and store a customer’s first and last name as a display name associated with a sales record. MakerFlow does not intentionally store a Shopify customer’s email address, phone number, shipping or billing address, payment information, or Shopify customer ID as part of its normal inventory workflow.

We seek to process only the customer information reasonably necessary to provide inventory and synchronization functionality.

Payment information

Subscription billing is processed by Stripe. We may receive billing status, subscription information, transaction identifiers, invoice and payment status, and limited payment-method metadata made available to us by Stripe. MakerFlow does not itself store complete payment-card numbers.

Technical and service information

As part of operating the service we and our infrastructure providers process technical information such as IP address, browser and device information, timestamps, authentication and security events, and application and error logs. MakerFlow uses browser storage and session technologies that are necessary to keep you signed in and to remember your active workspace. MakerFlow does not run third-party advertising trackers, and we do not operate a third-party marketing analytics tool on the application at this time.

• Providing, operating and maintaining MakerFlow
• Creating and maintaining accounts and workspaces
• Calculating and synchronizing inventory
• Importing products, listings and orders
• Processing production, purchasing and inventory activity
• Providing the channel integrations you authorize
• Billing and subscription administration
• Sending transactional and service emails
• Providing customer support
• Security, fraud and abuse prevention
• Debugging, monitoring and reliability
• Meeting legal and compliance obligations
• Improving MakerFlow using appropriately limited service data

We do not sell merchant or customer personal information, and we do not use your customers’ information for unrelated advertising purposes.

We use service providers to operate MakerFlow and may disclose information to them only as reasonably necessary to provide those services. Providers currently used include:

• Stripe — subscription payment processing and billing
• Lovable and its infrastructure subproviders — application hosting, managed database and authentication infrastructure, data storage, and transactional email delivery
• Google and Apple — optional sign-in providers, used only if you choose to sign in with them

Shopify, Etsy, Square and Faire are integrations you authorize. Information flows between MakerFlow and those platforms at your direction so that we can synchronize inventory and orders. Connected services have their own privacy practices and terms, which govern their handling of your information.

MakerFlow uses Shopify API data to provide inventory and order synchronization for merchants who install and authorize the MakerFlow Shopify integration.

• We minimize protected customer data and process only what is necessary for inventory and order synchronization.
• Privacy requests received through Shopify’s required privacy mechanisms are processed using the identifiers and order IDs Shopify supplies, where applicable.
• Customer-redaction requests remove the applicable customer display-name information while preserving non-personal inventory and accounting records where legally and operationally appropriate.
• Shop-redaction requests remove Shopify-derived connection credentials, mappings and related Shopify-derived data in accordance with applicable Shopify requirements. MakerFlow-owned business records, such as your own products, components and production history, may be retained where appropriate and permitted.
• Uninstalling or disconnecting Shopify disables the connection and removes or invalidates the integration credentials.

We do not sell personal information for money. We may disclose information in the following circumstances:

• To service providers who help us operate MakerFlow
• To connected platforms, at your direction, to provide integrations
• Where required by law, regulation, legal process or governmental request
• To protect the rights, property, safety or security of MakerFlow, our users or others, including fraud prevention
• In connection with a corporate transaction such as a merger, acquisition, financing or asset sale
• With your consent or at your direction

We retain information for as long as reasonably necessary to provide the service, maintain legitimate business, accounting and security records, comply with legal obligations, resolve disputes and enforce our agreements.

Personal data received from connected platforms is deleted or anonymized when it is no longer reasonably necessary for those purposes, or when a valid deletion or redaction request requires it, subject to legal and record-keeping exceptions.

MakerFlow uses reasonable administrative, technical and organizational safeguards designed to protect information. No method of transmission over the Internet and no method of electronic storage can be guaranteed to be 100% secure, and we cannot guarantee absolute security.

MakerFlow is operated from the United States. If you use MakerFlow from outside the United States, your information may be processed in the United States and in other countries where our service providers operate, which may have different data-protection rules than your country. Where legally required, we will use appropriate safeguards for such transfers.

Depending on where you live and applicable law, you may have rights to access, correct, delete or obtain a copy of your personal information, to restrict or object to certain processing, to withdraw consent where processing is based on consent, and to appeal a decision or lodge a complaint with a supervisory authority.

To make a request, email support@makerflow.io. We may need to verify your identity before acting on a request.

If you are a customer of a merchant who uses MakerFlow, please contact that merchant or store directly. MakerFlow generally processes that information in connection with services provided to the merchant, and we will cooperate with merchants and connected platforms as required.

MakerFlow is business software and is not directed to children under 13, or the higher minimum age required by applicable local law. We do not knowingly collect children’s personal information through direct account registration. If you believe a child has provided us personal information, contact us and we will take appropriate steps.

We may update this Privacy Policy from time to time. When we make material changes, we will communicate them as required by applicable law and update the effective date above.

See also our Terms of Service and Billing, Cancellation & Refund Policy.