Legal

Privacy Policy

Last updated: June 4, 2026

CaseFlow CRM uses Shopify data only to provide complaint management, customer support workflows, order lookup, product issue analysis, customer history, SLA management, and reporting for the merchant.

1. Company information

CaseFlow CRM (“CaseFlow,” “we,” “us,” or “our”) is a complaint management and helpdesk platform for Shopify merchants, operated by lvl-up Apps. This policy explains what information we collect, why we collect it, and the choices you have. For any privacy question, contact us at support@caseflowcrm.app.

2. What data CaseFlow CRM collects

To operate the service for a merchant, CaseFlow may process the following categories of data:

  • Shopify customer data — customer names, email addresses, phone numbers, and related contact details synced from your store.
  • Shopify order data — order references, line items, and order metadata used to attach orders to complaints.
  • Shopify product data — product titles, SKUs, sizes, colors, and variants used for product issue analysis.
  • Shopify store location data — store and location records used to attribute complaints to a branch or fulfillment location.
  • Complaint records — complaint codes, categories, types, priorities, statuses, descriptions, notes, and timelines you create.
  • Team member data — the names, email addresses, and roles of agents, managers, and admins you invite.
  • Support messages — messages exchanged with customers through the customer portal and email replies.
  • Usage and audit logs — records of actions taken in the app, used for security and the audit log feature.

3. Why data is collected

We collect and process this data solely to deliver and improve the CaseFlow service: to log and route complaints, attach relevant Shopify orders and products, maintain customer history, enforce SLA targets, send notifications, generate analytics and reports, and keep the platform secure. We do not sell your data, and we do not use it for advertising.

Shopify data usage

CaseFlow CRM uses Shopify data only to provide complaint management, customer support workflows, order lookup, product issue analysis, customer history, SLA management, and reporting for the merchant. Access is requested through Shopify’s standard authorization scopes, and data is used strictly to operate the features the merchant has enabled.

4. Data storage and security

Data is stored on secure, managed cloud infrastructure. We protect it with encryption in transit, access controls, and tenant-level isolation so that each merchant’s data is logically separated from every other merchant’s data. Access to production systems is restricted to authorized personnel for maintenance and support purposes.

5. Data sharing

We do not sell personal information. We share data only with the infrastructure and service sub-processors required to run CaseFlow — for example, cloud hosting, database, and transactional email providers — and only to the extent necessary to deliver the service. These providers are bound by confidentiality and data-protection obligations. We may also disclose data where required by law.

6. Data retention

We retain merchant and complaint data for as long as your account is active so the service remains useful. When you uninstall the app or close your account, we delete or anonymize associated personal data within a reasonable period, except where retention is required to comply with legal, accounting, or security obligations.

7. GDPR rights

If you are located in a region covered by the GDPR or similar regulations, you have the right to access, correct, port, restrict, or delete your personal data, and to object to certain processing. Merchants act as the data controller for their customers’ data, and CaseFlow acts as a processor on the merchant’s behalf. To exercise any right, contact us and we will respond in line with applicable law.

Data deletion requests

Merchants and their customers can request deletion of personal data by emailing support@caseflowcrm.app. We also honor Shopify’s mandatory data-erasure (GDPR) webhooks, which automatically request removal of customer data when triggered by Shopify.

Data export requests

You can export complaint data to CSV or Excel from within the app at any time. Pro plans include a Full Data Export report. For a complete export beyond the in-app tools, contact support and we will assist.

8. Children’s privacy

CaseFlow is a business-to-business tool intended for merchants and their teams. It is not directed to children, and we do not knowingly collect personal information from anyone under the age of 16. If you believe a child’s data has been provided to us, contact us so we can remove it.

9. Policy updates

We may update this Privacy Policy from time to time. When we make material changes, we will revise the “Last updated” date above and, where appropriate, notify merchants through the app or by email. Continued use of CaseFlow after an update constitutes acceptance of the revised policy.

10. Contact

For any questions, concerns, or requests regarding this policy or your data, contact us at support@caseflowcrm.app. CaseFlow CRM is operated by lvl-up Apps — www.lvl-up.services.

Contact Support