# FleekApps Privacy policy Effective October 22, 2026 · Last updated October 22, 2026 This policy explains how Fleek Apps LLC (“FleekApps”, “we”, “us”), a Delaware limited liability company, handles information when you visit our websites, when a Shopify merchant installs and uses one of our apps, when shoppers browse a store that uses them, and when you contact us or hire us for a project. It covers **fleekapps.com**, our help center at **help.fleekapps.com**, **rackscanner.com**, and our Shopify apps: [FunctionFlow AI](#functionflow-ai), [SmartSort AI](#smartsort-ai), [ShipRule](#shiprule) and [Rack Scanner](#rack-scanner), including Rack Scanner’s iPhone and Android apps when they are available on the App Store and Google Play. **In short:** our apps need your store details and the settings you create to work. They don’t store personal information about your customers, and we don’t sell personal information. On our websites, analytics and marketing tools only run if you allow them in our cookie banner. ## Our role For merchants, staff and website visitors, Fleek Apps LLC decides how information is used and is the “controller” and operator of our websites and apps. For data in a merchant’s Shopify store, such as products, inventory and orders, we act on the merchant’s instructions (we are a “processor” or “service provider”), and the merchant remains in control of that data. ## Information we collect from merchants Every app collects the following when you install and use it: - **Store details** provided by Shopify: shop domain, store name, contact email, currency, time zone, primary domain and Shopify plan. - **Staff account details** for the people who open the app, as provided by Shopify: Shopify user ID, name, email, locale and, where relevant, their role in the store. - **Access tokens** issued by Shopify so the app can act on your behalf. Tokens are stored encrypted and removed when you uninstall. - **Your settings**: the rules, configurations and preferences you create in the app. - **Billing status** of your subscription (plan, status, trial and billing dates) as reported by Shopify. We never see or store card details. Shopify handles payment. - **Support messages** you send us, and the details you include in them. Each app also handles the data described in its own section below. ## FunctionFlow AI - **What it stores:** the functions, conditions, actions, versions and templates you create, and the prompts you enter in the AI generator with the drafts it returns. Staff access tokens are short-lived (online) tokens tied to each staff member. - **Orders:** to measure how often your rules apply, the app receives order notifications from Shopify and uses them only to update aggregate counters (such as orders influenced, revenue, discounts and shipping savings per day). It does not store customer names, emails, addresses or other personal information from orders. - **At checkout:** your rules run inside Shopify’s own infrastructure as Shopify Functions. Cart and customer details used by a rule are processed by Shopify and are not sent to us. - **AI generator:** your prompt and a description of the app’s rule format are sent to OpenAI’s API to draft a rule. Prompts should not include customer personal information. ## SmartSort AI - **Catalog data:** products and variants (title, vendor, product type, tags, status, dates, price, compare-at price, cost per item, inventory, image URL) and your collections with the order of their products. - **Settings and history:** sorting rules, collection settings, featured products, smart tagging workflows, the notification email you choose, sort runs (the product order before and after), sync runs and an activity log of changes made in the app. An expiring offline token is used for scheduled sorting. - **Orders, line items only:** for sales-based sorting the app keeps order and line item IDs, the product, quantity, line revenue after discounts, whether the order is paid, fulfilled or cancelled, and the order date. It does not request or store customer names, emails, phone numbers, addresses or customer IDs; order webhooks are limited to these fields before they reach us. - **Storefront pixel:** the app adds a Shopify Web Pixel to your online store. When a shopper views a collection, opens a product from it or adds that product to the cart, the pixel sends the collection ID, the product IDs and their positions in the grid. No names, emails, customer or client IDs, cookies or device fingerprints are sent or stored. Events are counted per product, collection and day; individual visits are not stored, and IP addresses are used only briefly to limit abuse. The pixel runs in Shopify’s sandbox and follows the shopper’s privacy choices: where consent is required, it only runs for shoppers who allow analytics. - **AI recommendations:** on plans that include them, when you ask for one, a summary of the collection (product titles, tags, prices, stock, age, margin, sales figures and your current sorting settings) is sent to OpenAI’s API. No customer data is included. - **Retention:** order line items and daily storefront statistics older than about 13 months, sort history older than 90 days and activity logs older than 6 months are deleted automatically. ## ShipRule - **What it stores:** the shipping rules, conditions, actions and priorities you create, your app settings, and an activity history of changes (for example, which rule was edited and when). An expiring offline token keeps your checkout configuration in sync. - **Orders:** ShipRule does not receive or store order data. - **At checkout:** your rules run inside Shopify as a Shopify Function. To decide which delivery options to show, the function reads the cart, the customer’s tags and login status, and the shipping country, state or province and postal code. Shopify processes this data inside checkout; it is not sent to us and we do not store it. - **Retention:** webhook records and activity logs are trimmed automatically, and deleted rules are purged 30 days after deletion. ## Rack Scanner - **Store data:** products and variants (titles, images, barcodes, SKUs), inventory levels and locations, and orders (number, dates, payment and fulfillment status, total, currency, note, tags, shipping method and line items) so your team can count stock and pack orders. Order updates from Shopify are limited to these fields, so customer details aren’t included. - **Packing slips:** when staff print a packing slip, the order’s ship-to name, company, address and phone are read from Shopify for that slip only and are not stored. - **Mobile app accounts** (when the iPhone and Android apps are available on the App Store / Google Play)**:** name, email address and a hashed password. - **Devices:** platform, model, operating system and app version of phones connected to a store. - **Activity:** barcodes scanned, counts submitted and orders packed, with who and when, so merchants can audit every inventory change. - **Camera:** the mobile app uses the camera only to read barcodes and QR codes. Images are processed on the phone and are never uploaded or stored. - **Feedback board:** when you post an idea or comment on rackscanner.com, we store your name, email address and message. Only your name and message are shown publicly; we use your email to follow up. Upvotes are counted with an anonymous cookie, not tied to your identity. - **Retention:** stock CSV files and their reports are deleted after 30 days, and orders that no longer need packing are removed from the order list 60 days after their last update. Mobile app accounts aren’t tied to one store; anyone can ask us to delete their account at any time. ## Our websites and contact forms Our websites use strictly necessary cookies to work. Analytics and marketing tools only run after you consent to them in our cookie banner, and you can change your choice at any time with the “Your privacy choices” link in the footer. Our [cookie policy](https://fleekapps.com/cookie-policy/) lists every cookie and tool in use. Typefaces are hosted on our own servers; the footer animation on fleekapps.com loads the open-source Matter.js library from cdnjs (Cloudflare), which receives your IP address and sets no cookies. Standard server logs (such as IP address and pages requested) are kept for security and troubleshooting. When you email us, use a contact form or hire us for a project, we keep your name, email, company and what you tell us, to reply and to deliver the work. Data you share with us during a project is handled under that project’s agreement. ## Information about your customers Our apps are built so that personal information about your customers stays in Shopify. Where an app needs order data, it keeps only the fields described above, and logic that runs at checkout runs inside Shopify. If you are a customer of a Shopify store, please contact that store first: they control your data, and we will help them respond. ## How we use information - To provide our apps and websites, and the features you turn on. - To show you analytics, history and recommendations inside the apps. - To manage subscriptions through Shopify’s billing. - To send service emails you ask for, such as failed-sort alerts or password resets. - To provide support, reply to messages and deliver projects. - To keep the service secure and reliable, and to meet legal obligations. We do not sell personal information. If you allow marketing cookies on our websites, ad platforms may receive information about your visit, which some US state laws treat as “sharing” for targeted advertising. You can opt out at any time with “Your privacy choices”, and we honor Global Privacy Control signals as an opt-out. Our apps never use merchant or customer data for advertising. ## Legal bases Where the GDPR or UK GDPR applies, we process information to perform our contract with you (providing the apps and services), for our legitimate interests (security, support and improving the service, balanced against your rights), to comply with legal obligations, and with your consent where we ask for it. ## Service providers - **Shopify**: the platform our apps run on, including authentication, billing, checkout and the storefront pixel. - **OpenAI**: AI features in FunctionFlow AI and SmartSort AI, only when you use them, as described above. - **Apple and Google**: distribution of the Rack Scanner mobile apps through the App Store and Google Play, when they are available there, under their own privacy policies. - **Hosting, email and infrastructure providers** that store and process data on our behalf under confidentiality obligations. We may also disclose information if required by law, or as part of a merger or sale of our business, in which case this policy continues to apply. ## International transfers We are based in the United States, and our providers may process data in the United States and other countries. Where data protection law requires it, we rely on appropriate safeguards, such as the European Commission’s standard contractual clauses, for transfers. ## Retention and deletion We keep your data while an app is installed, and each app trims older records as described in its section. When you uninstall, your access tokens are removed immediately and your store’s data is deleted when Shopify sends the store data-removal request (typically 48 hours after uninstall). We respond to Shopify’s customer data and customer redaction requests as Shopify requires; because our apps hold no customer personal data, there is usually nothing to return or delete. Support and project emails are kept as long as needed to help you and to meet legal and accounting obligations. ## Security Data is transmitted over HTTPS. Access tokens are encrypted at rest, passwords are hashed, requests from Shopify are verified with signed session tokens and HMAC signatures, and access to production systems is restricted and logged. ## Your rights Depending on where you live (for example in the EU, UK, California or another US state with a privacy law), you may have the right to know what personal information we hold, to access, correct, delete or export it, to object to or restrict its processing, to opt out of targeted advertising and of the sale or sharing of your information, and to withdraw consent. You can opt out of cookies-based sharing with “Your privacy choices” in our website footer or with a Global Privacy Control signal. We won’t treat you differently for using these rights. Email [hello@fleekapps.com](mailto:hello@fleekapps.com) and we’ll respond within the time required by law. You can also complain to your local data protection authority. ## Children Our apps and websites are for businesses and are not directed to children under 16. We don’t knowingly collect their personal information. ## Changes We may update this policy. We’ll change the “Last updated” date and, for significant changes, notify merchants in the apps. ## Contact The controller responsible for your information is Fleek Apps LLC. For privacy questions and requests, contact: Fleek Apps LLC 16192 Coastal Highway Lewes, Delaware 19958 United States [hello@fleekapps.com](mailto:hello@fleekapps.com) [+1 350.205.5200](tel:+13502055200) (Mon–Fri, 9 AM–5 PM ET) --- Source: https://fleekapps.com/privacy/