Privacy Policy

Last updated: 21 September 2026

QuoteFlow ("the App") is operated by Artep tech (Aleksandar Stančević PR Računarsko programiranje Artep tech), Subotica, Serbia — registration no. 68211425, tax ID 115243761 ("we", "us"). The App lets Shopify merchants ("Merchants") receive quote requests from customers, send priced quotes and let customers accept and pay them. This policy describes how we collect, use and share personal information when a Merchant installs the App or a customer requests or accepts a quote. For customer data we act as a processor on the Merchant's behalf; the Merchant is the controller.

Information we collect

When you install the App we receive, through Shopify's APIs, information needed to operate the service:

• Store information: store name, myshopify domain, store owner email, currency, plan type.
• Product information: product, variant and collection IDs the Merchant puts in quote mode, plus titles, prices and images of items a customer requests a quote for.
• Quote request information entered by the customer: name, email address, phone and company (optional), quantities and message.
• Quote and order information: quoted prices, totals, validity, and the Shopify draft order and order created when a quote is accepted and paid.

The App never receives or stores card numbers; payment happens in Shopify checkout.

How we use information

• To show the quote button and hide prices on the products the Merchant chooses.
• To deliver quote requests to the Merchant and quotes (including a PDF) to the customer, and to create the Shopify draft order when a quote is accepted.
• To send transactional emails (request confirmation, quote, expiry reminder) and notify the Merchant.
• To provide support and to operate, secure and improve the service.

We do not sell personal information and we do not use it for advertising.

Sharing

We share information only with processors needed to run the App: our hosting provider (Fly.io, servers in Frankfurt, Germany) and our transactional email provider (Resend, EU region) for notifications. Each processor acts on our instructions and is bound by data-processing terms. We do not sell personal data. We may disclose information if required by law or to protect our rights.

International transfers

Data is stored in the European Union. Where a processor transfers data outside the EU/EEA, it does so under standard contractual clauses or an equivalent lawful mechanism.

Retention and deletion

Quote records are kept while the App is installed so the Merchant can track and honour quotes. When a Merchant uninstalls the App, Shopify sends us a shop redaction request and we delete all data for that store within 30 days. Customer data-request and redaction requests received from Shopify are honoured automatically.

Security

Data is transmitted over TLS and stored on access-controlled infrastructure. Access tokens are stored encrypted at rest by the hosting provider and are never exposed to browsers.

Your rights

Depending on where you live (including the EU/EEA, UK and California) you may have the right to access, correct, delete, port or restrict processing of your personal information, and to object to processing or lodge a complaint with a supervisory authority. Customers should contact the Merchant they purchased from; Merchants may contact us at support@arteptech.com. We respond within 30 days.

Children

The App is intended for businesses and is not directed at children under 16; we do not knowingly collect their data.

Changes

We may update this policy; the date above shows the latest version. Material changes will be announced inside the App.

Contact

Artep tech (Aleksandar Stančević PR Računarsko programiranje Artep tech), Subotica, Serbia — registration no. 68211425, tax ID 115243761 · support@arteptech.com