Privacy Policy

Privacy

Last Updated: Jun 24, 2026

Please read this privacy policy carefully

This Privacy Policy explains how we collects, uses, stores, and shares information when you installs and uses Funnel AI Landing Page, an AI landing-page builder for Shopify, and when a Customers interact with landing pages created with the App.

By installing or using the App, you agree to this Privacy Policy.

Information We Collect

1. Information from your Shopify store

When you install the App via Shopify OAuth, we receive and store information necessary to operate the App, including:

Store identifiers — your myshopify.com domain and Shopify store ID.
Shopify access tokens — used to call the Shopify Admin API on your behalf.
Store user information provided by Shopify in the authentication session (such as the account owner/staff name, email, locale, and collaborator status), as supplied by Shopify's session.

The App requests the following access scopes and uses them only for the stated purpose:

2. Information you provide to the App

Third-party API credentials. You may connect your own AI provider key (Anthropic, OpenAI, or Google) and/or your own Klaviyo private API key and list ID. AI provider keys are stored encrypted (AES-256). These credentials are used only to perform the actions you request.
Landing-page content and briefs. Product details, offers, target persona, copy instructions, design preferences, generated landing pages, generated email sequences, templates, and version history that you create in the App.

3. Customer (buyer) information collected via the storefront

When a Customer submits the subscribe form on a published landing page, the App receives:

The Customer's email address.
The landing page handle the form was submitted from.

This Customer data is forwarded to your connected Klaviyo account (using your own Klaviyo key) to add the Customer to your list and trigger your welcome email flow. The App does not store Customer email addresses in its own database.

4. What we do not collect

We do not collect or process payment card or financial account data.
We do not set third-party tracking cookies in the Shopify admin; the embedded App authenticates using Shopify session tokens.
We do not retain Customer personal data in our own database.

How We Use Information

We use the information described above to:

Authenticate the App and operate it within your Shopify admin.
Generate landing pages and email content using the AI provider you connect.
Publish, update, and remove landing pages and their supporting theme template files.
Sync landing-page subscribers into your connected Klaviyo account and trigger your email flow.
Provide support, maintain security, debug issues, and improve the App.
Comply with legal obligations.

We do not sell personal information, and we do not use Customer data for our own marketing.

Third-party services and sub-processors

The App relies on the following service providers. Data is shared with them only as needed to provide the App:

Shopify — App platform, authentication, Admin API, and webhooks. Data shared: store identifiers, access tokens, and page/theme data.
Render (application hosting) — Runs the App server. Data shared: all processed data in transit.
Supabase (database hosting) — Stores App data. Data shared: store records, settings (including encrypted AI keys), briefs, and generated pages and emails.
Anthropic, OpenAI, and Google (AI providers) — Generate landing-page and email content. Data shared: the content brief and product context you submit, sent using your own API key.
Klaviyo — Email list subscription and email delivery. Data shared: Customer email addresses and generated email content, sent using your own Klaviyo key.

When you connect your own AI provider or Klaviyo key, your use of those services is also governed by their terms and privacy policies.

Data sharing and disclosure

We do not share personal information except:

With the sub-processors listed above to provide the App.
To comply with law, legal process, or a lawful government request.
To protect the rights, property, or safety of us, our users, or the public.
In connection with a merger, acquisition, or sale of assets, subject to this Policy.

Data retention and deletion

While installed: we retain your store data for as long as the App is installed so it remains available to you.

On uninstall: we mark your store as uninstalled and delete your Shopify session/access tokens. Your landing-page data is retained temporarily so it can be restored if you reinstall.
Shop data erasure (shop/redact): approximately 48 hours after uninstall, in response to Shopify's mandatory compliance webhook, we permanently delete all of your store's data from our database, including settings and your encrypted/stored API keys.
Customer data requests (customers/data_request, customers/redact): we support Shopify's mandatory customer data webhooks. Because the App does not store Customer personal data in its database (subscriber emails are forwarded to your Klaviyo account), there is no Customer personal data for us to return or erase; data in your Klaviyo account is managed by you as the controller.

You may also contact us at hello@flunnel.ai to request access to or deletion of your data.

Data security

We implement reasonable technical and organizational measures to protect information, including:

Encryption in transit using TLS/HTTPS.
Encryption at rest (AES-256) for stored AI provider API keys.
Strict multi-tenant data isolation so each store can access only its own data.
Restricted access to production systems.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Your Rights

Depending on your location, you (and your Customers, via the Merchant as controller) may have rights to access, correct, delete, or restrict the processing of personal data, and to data portability. Requests can be made to hello@flunnel.ai. For Customer data, please direct requests to the relevant Merchant; we will assist the Merchant as their processor.

This Policy is intended to support compliance with applicable laws including the GDPR and CCPA/CPRA.

Children's privacy

The App is intended for use by businesses and is not directed to children. We do not knowingly collect personal data from children.

Contact Us

If you have questions or requests regarding this Privacy Policy or your data, contact:

Flunnel
Email: hello@flunnel.ai
Website: https://flunnel.ai

AgentLab AI

New

Get Template