Privacy Policy

Last Updated: February 7, 2026

Introduction

Welcome to A7 Flow ("we," "our," or "us"). A7 Flow is a SaaS Order Management & Shipping Platform based in Algeria, dedicated to helping merchants manage their e-commerce operations efficiently.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application (https://a7flow.pro) and our integrations with third-party services such as ZRExpress, Guepex, Shopify, YouCan, and Meta Platforms.

By accessing or using A7 Flow, you agree to the collection and use of information in accordance with this policy.

Data We Collect

Account Data

Name, business name, email address, phone number, and encrypted password.

Order Data

End-customer details (name, address, phone) and product details for fulfillment.

Integration Data

API Tokens (ZRExpress, Guepex), OAuth Tokens (Shopify, Meta), and imported order data.

Usage Data

IP addresses, browser type, interaction logs, and session cookies.

How We Use Your Data

We process your data to provide a seamless experience:

Service Delivery (Orders & Tracking)
Sync Integrations (Shopify/Meta)
Fraud Prevention & Security
Platform Improvement
Customer Support

Third-Party Data Sharing

We do NOT sell your data. We only share data with processors required to provide the service.

Third Party	Data Shared	Purpose
ZRExpress & Guepex	Order details	Physical delivery
Shopify	Order Status & IDs	Sync status
Meta	Messages	Chat Automation
Supabase	All Encrypted Data	Hosting & DB

User Rights (GDPR)

Right to Access

Right to Rectification

Right to Deletion (Forgotten)

Right to Portability

Withdraw Consent

To exercise these rights, email us at: privacy@a7flow.pro

Data Security

Bank-Grade Encryption

We implement industry-standard security measures including SSL/TLS encryption for data in transit and AES-256 for sensitive data at rest (API Tokens, Passwords). Access is strictly limited to authorized personnel.

Data Retention

We retain your personal data only for as long as is necessary. Upon your request to delete your account, all personal data will be permanently deleted within 30 days, unless required for legal obligations.

Cookies Policy

We use cookies mainly for session management (keeping you logged in) and basic analytics to improve performance. You can control cookies through your browser settings.

Platform Compliance

Meta Platforms

We comply with Meta Platform Terms. Data received from Facebook/Instagram is used solely for the features you authorized. We do not use this data for surveillance.

View Meta Policy

Shopify

We act as a Data Processor for Shopify merchants, complying with Shopify's DPA. Customer data is handled securely and only for order management purposes.

View Shopify Policy

12. Contact Us

Have questions about your data?

Our privacy team is available to assist you.

privacy@a7flow.proAlgiers, Algeria