Last updated: June 24, 2026
SetupFlow (“we”, “our”, “us”) respects your privacy and is committed to protecting the personal data of our users (merchants) and their end customers. This policy has been aligned with the Digital Personal Data Protection (DPDP) Act, 2023 (India) and other applicable global data standards.
1. Data Roles: Fiduciary & Processor
- For Merchant Account Data: SetupFlow acts as the Data Fiduciary for the personal data you share during signup, billing, and support.
- For Storefront Customer Data: When you use SetupFlow to power your online store, you (the Merchant) are the Data Fiduciary of your customers' data. SetupFlow acts strictly as a Data Processor, routing transactions from your store directly to your Google Sheets without permanently storing them.
2. 100% Serverless Data Ownership (No Data Residence)
SetupFlow operates entirely within your own Google Workspace. We do not host, store, or retain your customers' personal data, order histories, inventory numbers, or revenue metrics on our servers. All operational data generated by your customers' orders remains exclusively on your own Google Drive and Google Sheets.
3. Personal Data We Collect
We only collect the absolute minimum personal data necessary to provide and manage your software license:
- Account Information: Name, email address, phone number, and basic business details (such as store name).
- Billing Data: Tax registration numbers (like GSTIN, if provided) and billing addresses.
4. Purpose of Processing
We process your personal data only for specific, lawful purposes:
- To set up, deliver, and license the SetupFlow storefront software.
- To communicate updates, service notices, and provide technical support.
- To process payments and manage your subscription.
- We will never sell, rent, trade, or share your personal data with third parties for marketing purposes.
5. Third-Party Integrations & Services
- Google Services: SetupFlow requires integration with Google Sheets, Google Drive, and Google Forms to function. Your use of these services is governed by Google’s Privacy Policy.
- Payment Gateways: All payments are processed securely through trusted third-party providers (such as Razorpay, Skydo, or Xflow). We do not collect or store your credit card details or UPI credentials.