Privacy Policy

Article 1. What we collect and why

1. We collect the following information and use it to provide our services, respond to inquiries and support requests, perform contracts and billing, send announcements about our apps and services, prevent abuse, and comply with applicable laws.
2. Website access logs (IP address, user agent, viewed URL, etc.).
3. Information you submit via our contact form: name, company name, email address, store URL, and inquiry content.
4. Store information provided by Shopify when you install our apps, and product, order, and customer data fetched via the Shopify API or Webhooks to the extent needed for each app to function (items vary by app). This data is deleted in principle within 30 days of uninstallation.
5. Representative names, contact information, and billing-related information tied to contracts and quotes.
6. We may send announcements about our apps and services (including new features and information about our other apps and services) by email to the store email address of stores using our Shopify apps. You can stop receiving these emails at any time via the link in each email.

Article 2. Sharing with others

We do not share your personal information with third parties except with your consent, where required by law, or in connection with a business succession (e.g., merger or acquisition).

Article 3. External services we use

1. We use the following external services to provide our services. Personal information may be stored on or transmitted to servers operated by these providers, primarily located in the United States and Canada. You can review the data protection regimes of each country on the website of the Personal Information Protection Commission of Japan (https://www.ppc.go.jp/).
2. Shopify Inc. (Canada / United States) — runtime platform for Shopify apps and merchant billing.
3. Cloudflare, Inc. (United States) — hosting for our website and Shopify apps (Workers and related services), and management of contact information for stores using our Shopify apps (D1).
4. Fly.io, Inc. (United States) — hosting and database for some of our Shopify apps.
5. Resend, Inc. (United States) — administrator notification emails for some of our Shopify apps, and announcement emails to stores using our Shopify apps.
6. Google LLC (United States) — Google Analytics for traffic analysis of our website. Cookies and similar technologies send viewed URLs, referrers, and user agent information to Google servers (not used to identify individuals).
7. Microsoft Corporation (United States) — Microsoft Clarity for heatmaps and session analysis of our website and the admin and work screens of the Shopify apps we provide. Cookies and similar technologies send viewed URLs and interaction data to Microsoft servers (on-screen text is masked before transmission and the data is not used to identify individuals).
8. Cookies used by these analytics services can be declined via your browser settings.

Article 4. Security

We implement appropriate safeguards — including transport-layer encryption, access controls, and log monitoring — to protect personal information from unauthorized access, leakage, or loss.

Article 5. Your rights

You may request disclosure, correction, deletion, or suspension of use or third-party provision of your personal data held by us. There is no fee. Please contact us via the channel below.

Article 6. Changes to this Policy

We may revise this Policy as needed. Material changes will be announced on this website.

Contact

1. Personal Information Protection Manager: Naoki Iida
2. Contact: contact@flatto.dev
3. Operator: Flatto Inc.
4. Address: 2F-C, Shibuya Dogenzaka Tokyu Bldg., 1-10-8 Dogenzaka, Shibuya-ku, Tokyo 150-0043, Japan