Protected Customer Data — Flow Fill

No customer personal data. Flow Fill requests no read_customers and no read_orders scope, and it never stores a customer's name, email, phone, address, IP or order contents — on Shopify or in Klaviyo. Everything it reads is listed below, in full.

What we access

• Your Klaviyo flow metadata (flow names and status) via a private API key you provide, used to detect which lifecycle flows you have vs. which are missing.
• Your store's brand context (shop name, product titles, content) via read_products and read_content, used only to ground generated email copy in your brand voice.
• Your main theme's settings (read_themes) — config/settings_data.json, read for its brand colours only.
• Your markets and languages (read_markets/read_locales) — market names, countries, currency and locales, so flows can be built per market.
• Discounts you ask us to create (read_discounts/write_discounts) — code strings only, never who redeemed them.
• Checkout events via our own first-party Web Pixel (read_customer_events/read_pixels/write_pixels). Shopify delivers the checkout_completed event into a sandboxed worker; from it we read four things and send only those to our server: order value, currency, the UTM parameters of our own flow/campaign tags, and the checkout token, kept solely to de-duplicate a repeated beacon. Every other field of that event — name, email, phone, address, line items — is left unread and never leaves the shopper's browser. That is the whole of our customer-event processing, and it is auditable in the extension source.

What we never access

• Orders, customers, or any customer personal data — on Shopify or in Klaviyo. We never request read_orders or read_customers.

Security

• Your Klaviyo key and any Shopify access token are encrypted at rest (AES-256-GCM) and never returned to the browser or written to logs.
• On uninstall and on a Shopify shop/redact request, all of your stored data is deleted.
• The GDPR customers/data_request and customers/redact webhooks are answered truthfully: we hold no customer data.