Legal Document
Privacy Policy
Effective date: May 22, 2026 · Last updated: May 22, 2026
KnowFlow ("we", "us", "our") is a Shopify app that helps merchants understand why customers return products by collecting return reasons, detecting patterns, and suggesting product fixes. This policy explains what data we collect, how we use it, and how it is protected.
1. Who We Are
KnowFlow is operated by PATHAKHRK INC ("Operator"). Our app is available on the Shopify App Store and is accessible at knowflow.pathakhrk.com.
If you have questions about this policy, contact us at: info@pathakhrk.com
2. Data We Collect
We collect two categories of data:
From Merchants (Shopify store owners who install KnowFlow):
- Shopify store domain and access token (for API access)
- Sender name and email address configured in settings
- Flow configurations, email content, and templates created by the merchant
- Plan and billing status
From End Customers (shoppers of the merchant's store):
- Name and email address (from Shopify order data)
- Order ID and product information (to trigger and personalize drip emails)
- Return reason category selected by customer
- Optional free-text return explanation (max 500 characters)
- Optional photo of returned item
- Opt-out/unsubscribe status
3. How We Use Data
- To collect and categorize return reasons from customers
- To detect patterns and trends in product returns
- To provide plain-English insights and fix suggestions to merchants
- To generate weekly digest reports for merchants
- To comply with data deletion requests
We do not sell data to third parties. We do not use customer data for advertising. We do not share data between merchants.
4. Data Storage and Security
- All data is stored in MongoDB Atlas (cloud database with encryption at rest)
- API communications use HTTPS/TLS encryption
- Shopify access tokens are stored encrypted
- No sensitive payment data is ever stored by KnowFlow
5. Data Retention
- Merchant data: Retained while the app is installed. Deleted within 30 days of uninstall.
- Return data: Retained for 24 months then deleted.
- Opt-out records: Retained indefinitely to prevent accidental re-enrollment.
6. GDPR Compliance (EU Merchants and Customers)
For merchants serving EU customers, KnowFlow provides:
- One-click unsubscribe — included in every email footer
- Data deletion — merchants can request full data deletion by emailing us
- Data portability — we can export your data on request
- Lawful basis — emails are sent under legitimate interest (post-purchase communication) and/or consent where applicable
KnowFlow acts as a Data Processor on behalf of the merchant (Data Controller). Merchants are responsible for ensuring their use of KnowFlow complies with applicable privacy laws in their jurisdiction.
7. Third-Party Services
KnowFlow uses the following third-party services to operate:
8. Children's Privacy
KnowFlow is not directed to individuals under the age of 16. We do not knowingly collect personal data from children.
9. Changes to This Policy
We may update this policy from time to time. We will notify merchants of material changes via email or an in-app notice. Continued use of KnowFlow after changes constitutes acceptance of the updated policy.
10. Contact
For privacy questions, data deletion requests, or GDPR inquiries:
Email: info@pathakhrk.com
Website: knowflow.pathakhrk.com