Privacy Policy

Effective September 25, 2026. This policy describes what the BadgeFlow Shopify app stores when it is installed on a store, why, and how to have it deleted.

1. Who we are

BadgeFlow is built and operated by MPC Trades, Noksapyeong-daero 46-gil 38, 3rd floor, Yongsan-gu, Seoul 04573, South Korea. When a merchant installs BadgeFlow, we process the store data described below on the merchant's behalf. Shoppers should contact the store directly about their own orders or accounts.

2. What we collect

• Campaign and settings data. The badge campaigns you create (badge text, colour, position, size, target products or collection, schedule) and your BadgeFlow settings. These are stored in our database and copied into a metafield owned by the app in your store, so the storefront can display badges.
• Product information needed for targeting. Product and collection names, handles, images and prices read from your store through the Shopify API, used to target badges and show previews. Product handles for live campaigns are included in the storefront metafield.
• Embed status. Whether the BadgeFlow app embed is switched on in your published theme, as reported by Shopify inside the admin. BadgeFlow does not read or change your theme files.
• Authentication data. Your store's myshopify.com domain and a Shopify-issued access token, so the app can call the Shopify API on your behalf.
• Plan status. Your BadgeFlow plan, read from Shopify's billing system. Payments are handled entirely by Shopify.

3. What we don't collect

• No customer data: no shopper names, emails, addresses, orders or payment details. BadgeFlow does not request access to customers or orders.
• The storefront script only reads the campaign data above and draws badges. It sets no cookies and sends no shopper data to us or anyone else.
• No card or bank details. Charges for paid plans go through Shopify.

4. How we use it

Only to run BadgeFlow: showing your campaigns in the app, displaying badges on your storefront at the scheduled times, and applying your plan. We don't sell data or use it for advertising.

5. Sharing with third parties

We share data only with Shopify, as needed to run the app, and with the hosting provider that runs our server. We don't send your store data to AI providers or analytics services.

6. Retention and deletion

• When you uninstall BadgeFlow, your access sessions are deleted immediately.
• When Shopify sends its shop data erasure request (about 48 hours after uninstall), we delete all remaining data for your store, including campaigns and settings.
• The storefront metafield is owned by the app and is removed by Shopify when the app is uninstalled.

7. Your rights and requests

You can ask to see, correct or delete your store's BadgeFlow data at any time by emailing us. We also respond to Shopify's mandatory privacy requests (customer data requests, customer data erasure and shop data erasure). Because BadgeFlow stores no customer data, customer requests have nothing to return or erase.

8. Changes and contact

If this policy changes, we'll update the date above. Questions or requests: team@mpctrades.com.