Privacy Policy

Last updated: June 5, 2026

POFlow is operated by Black Brick Software. This policy explains what data we collect, how we use it, and your rights.

What We Collect

From Shopify (via API)

When you install POFlow, we request access to the following Shopify data:

• Products (read_products): SKUs, titles, variants, barcodes, and prices. Used to match purchase order line items to your catalog.
• Orders (read_orders, write_orders, write_draft_orders, read_draft_orders): We create draft or regular orders from processed purchase orders.
• Companies & Locations (read_companies, write_companies): B2B company names, locations, and addresses. Used for company and location matching on purchase orders.
• Customers (read_customers): Customer names associated with orders. Used to link orders to the correct buyer.

From You (directly)

• Purchase order files: PDFs, Excel spreadsheets, CSVs, Word documents, images, and text files that you upload for processing.
• App settings: Your preferences for order creation mode and other configuration.

How We Use Your Data

AI Processing

When you upload a purchase order file, its content is sent to Anthropic (the company behind Claude AI) for data extraction. Anthropic processes the file content to identify line items, company names, addresses, and PO numbers.

Anthropic does not use API inputs to train their models. See Anthropic's Terms of Service for details.

Matching & Learning

Extracted data is matched against your Shopify product catalog and B2B companies. When you confirm a match, we store the mapping (e.g., "buyer SKU X = your product Y") so future orders from the same buyer resolve instantly without AI.

Where Data Is Stored

• Application data (extracted POs, matches, mappings, billing): stored on DigitalOcean infrastructure in the United States.
• Uploaded files: stored on DigitalOcean Spaces (S3-compatible storage) in the United States.

Data Retention

Your data is retained while the app is installed on your store. When you uninstall POFlow, we delete all your data (uploaded files, extracted POs, product matches, company mappings, and settings) within 30 days per Shopify's data protection requirements.

We retain anonymized billing records (amounts and dates only, with identifying information removed) as required by tax and accounting law.

Data Sharing

We do not sell your data. We do not share your data with third parties except:

• Anthropic: purchase order file content is sent for AI extraction, as described above.
• Shopify: orders and data are sent back to your Shopify store via their API.

Your Rights

As a merchant using POFlow, you can:

• Request a copy of all data we store about your shop by emailing us
• Request deletion of your data at any time by emailing us
• Uninstall the app to trigger automatic data deletion

Contact

For privacy questions or data requests: [email protected]