This Privacy Policy applies to all services provided by FeedFlow ("Platform," "we," "us"). It governs how we collect, use, store, and share data in connection with merchants' ("Merchant," "you") use of the application. By using the Platform, you agree to the terms set forth herein.

1. Service Description

FeedFlow is a SaaS platform that provides the following services to Salla and Zid merchants:

• OAuth Integration with Salla & Zid: We connect to your store account via OAuth 2.0 to securely and automatically retrieve products, reviews, and promotions.
• XML Feed Generation: We generate XML feed URLs for products, reviews, and promotions in formats compatible with Google Merchant Center (RSS 2.0 + Google Shopping extensions, and Product Reviews Schema v2.4). Merchants manually add these URLs to their own Google Merchant Center account.
• POAS (Profit on Ad Spend) Calculation: We calculate the net profit per order by deducting COGS, shipping, taxes, and payment gateway fees from the order total.
• Conversion Tracking (CAPI): Server-side transmission of conversion data to Google Ads, TikTok, and Snapchat APIs to improve ad campaign performance.
• Google Customer Reviews: Enabling the customer satisfaction survey and ratings badge on your storefront.
• Custom Tracking Domains: Assigning a subdomain per merchant via Cloudflare for SaaS.

2. Data We Collect

A. Store & Merchant Data

• Store name, URL, logo, email, phone number.
• Store ID on Salla or Zid platform.
• OAuth Access Tokens and Refresh Tokens — stored encrypted using Fernet (AES-128).
• Google Ads Customer ID and Conversion Action ID — required for sending conversion data.
• TikTok and Snapchat Pixel IDs and access tokens.

B. Product & Inventory Data

• Product name, description, regular price, sale price, availability status, weight, images (up to 10).
• Product identifiers (SKU, Barcode, GTIN, MPN), brand, category.
• Cost price — used exclusively for POAS calculation and never shared with third parties.

C. Reviews & Promotions Data

• Review content, star rating, reviewer name, associated order ID.
• Promotional offer details (discount type, percentage, validity dates).

D. Order & Conversion Data

• Order ID, order value, currency, payment method.
• Purchased product data (IDs, quantities, prices).
• Ad click identifiers: GCLID (Google), WBRAID, GBRAID, TTCLID (TikTok), SCID (Snapchat) — collected from the shopper's browser via Google Tag Manager for attribution purposes only.
• Customer email and phone number — collected solely for Enhanced Conversions and immediately hashed to SHA-256 (see Section 5).
• IP address and User-Agent string — for device matching and conversion signals.

3. How We Use Data

• Generating ready-to-use XML feed URLs for the Merchant to manually add to Google Merchant Center.
• Sending conversion data to ad platforms (Google Ads, TikTok, Snapchat) to optimize campaign performance.
• Calculating net profit per order (POAS) for display in the dashboard.
• Automatically syncing products, reviews, and promotions from Salla/Zid and generating updated XML files.
• Sending credentials and notifications to the Merchant via email.
• Running scheduled background tasks (token refresh, sync verification, click matching).

4. Google API Services Usage

Google Merchant Center:

• Integration method: FeedFlow does not connect directly to Google Merchant Center via API. The system generates XML feed URLs that are compatible with the platform's requirements, which the Merchant manually registers in their own Google Merchant Center account.
• Data transmitted: Product, review, and promotion data formatted as XML — nothing is sent directly from our servers to Google Merchant Center.

Google Ads API:

• What we access: Google Ads Customer ID and the list of conversion actions associated with the account.
• Why: To send conversion data (order value, GCLID) via the Conversions API for campaign optimization purposes only.
• Limitation: We do not modify campaigns, ads, or budgets. Access is restricted to write operations on conversion actions only.
• Revocation: You can unlink Google Ads at any time from your dashboard settings, and transmissions will stop immediately.

5. Encryption & Protection of Sensitive Data

6. Data Sharing with Third Parties

We share data only to the extent necessary to provide the Service:

We do not sell or share your data for marketing purposes with any external party.

7. Data Retention & Deletion

• When the app is uninstalled from Salla, all merchant data (products, reviews, conversions, webhook logs) is automatically and permanently deleted — this action is irreversible.
• You may request data deletion at any time by contacting us at info@feedflow.pro — requests are fulfilled within 7 business days.
• Webhook logs are retained for 90 days for audit purposes.
• Conversion data sent to Google Ads is marked as "synced" and not automatically deleted to ensure auditability.

8. Data Security

• The application operates over HTTPS with HSTS enforcement and secure cookies.
• Database access is restricted to service accounts only.
• Rate limiting is applied to sensitive API endpoints (10 requests per 60 seconds per IP).
• OAuth tokens are automatically refreshed 24 hours before expiry.

9. Your Rights as a Merchant

• Access: You can view all stored data via your dashboard.
• Correction: You can update your store data in Settings at any time.
• Deletion: Uninstalling the app deletes all data immediately, or contact us for manual deletion.
• Revocation: You can unlink Google Ads, TikTok, or Snapchat at any time from Settings.
• Objection: You can stop sending conversion data to any platform independently.

10. Cookies

FeedFlow does not set first-party cookies on your storefront. Click identifiers (GCLID, TTCLID, SCID) are received via GTM that you manage as a merchant. You are responsible for managing shopper consent.

11. Children's Privacy

Our services are directed to adult merchants (18+). We do not knowingly collect personal data from minors.

12. Contact & Complaints

For any inquiry or request regarding this policy:

• Email: info@feedflow.pro
• Website: feedflow.pro

We will respond to all inquiries within 5 business days.