Privacy Policy

Last updated July 18, 2026

1. Who we are

CaseFlow is a B2B wholesale ordering app for Shopify merchants, operated by MAPD (Laurence Tansy), Singapore. Contact: laurence.tansy@gmail.com

2. Information we collect

We collect the following information from wholesale buyers who register on the portal:

• Business name and contact name
• Email address (used for magic-link authentication and order notifications)
• Order history (products ordered, quantities, totals)

From Shopify merchants who install CaseFlow, we receive store information provided by Shopify during the OAuth installation flow, including store domain, owner email, and product/order data necessary to operate the app.

3. How we use your information

• To authenticate wholesale buyers via magic links
• To process and display wholesale orders
• To send order confirmation and invoice emails via Resend
• To operate and improve the CaseFlow service
• To protect against fraudulent or unauthorised access

4. Data sharing

We do not sell your data. We share data only with:

• Shopify — to create draft orders and manage merchant sessions
• Resend — to deliver transactional emails (Resend Privacy Policy)
• Neon — our database provider (Neon Privacy Policy)
• Railway — our hosting provider (Railway Privacy Policy)

5. Data retention

We retain your data for as long as you have an active account with us. When a merchant uninstalls CaseFlow, their data is retained for 30 days to allow reinstallation, then permanently deleted. You may request deletion at any time by emailing us.

6. Your rights

Depending on your location, you may have the right to access, correct, or delete your personal data. To exercise any of these rights, contact us at laurence.tansy@gmail.com. We will respond within 30 days.

7. GDPR (EU/UK users)

If you are located in the EU or UK, our legal basis for processing your data is the performance of a contract (providing the CaseFlow service) and legitimate interests (security and service improvement). You have the right to lodge a complaint with your local data protection authority.

8. Children

CaseFlow is not intended for users under 18. We do not knowingly collect data from minors.

9. Changes to this policy

We may update this policy. We will notify merchants by email if changes are material. Continued use of CaseFlow after changes constitutes acceptance.

10. Contact

MAPD — CaseFlow
Singapore
laurence.tansy@gmail.com