Privacy policy
Last updated October 30, 2026
FloristPilot is a Shopify app for flower shops, made by Dopamine Flowers LLC in Honolulu, Hawaii. This page explains what personal data the app handles, why, and how long we keep it. Questions: hello@floristpilot.com.
Two kinds of data, two roles
- About the shop (the florist who installs the app): we decide how it is used, so we are the controller.
- About the shop’s customers and staff: the shop decides, and we handle it only to run the app for them. The shop is the controller and we are the processor. Our Data Processing Addendum covers this.
What we process
- The shop’s account: store name and address, the owner’s name, email and phone, plan and settings.
- The shop’s customers: name, email, phone, delivery address, recipient name and phone, card message, order details and notes.
- The shop’s staff: name, phone number and role, used to sign them in to the staff app with a text link (no passwords).
- Calls and texts, only when the shop turns on its business phone number: messages, call log, voicemail recordings and transcripts.
- Driver location, only while a driver is on a route, so the customer can follow the delivery.
- Photos the shop takes of an order (the “Ready” photo and the delivery photo).
Why
- Store management: the order board, delivery dates and windows, routes for drivers.
- Customer service: order updates by email or text, the customer’s order page, replies in the inbox.
- Analytics: sales reports and the shop’s customer list.
- Marketing the shop turns on: review requests, yearly occasion reminders the customer asked for, and win-back emails. Every marketing message has a one-click opt-out, and texting follows STOP/HELP.
We use the minimum data each feature needs, and only for these purposes.
What we never do
- We do not sell personal data or share it for advertising.
- We do not use customer data to train AI models.
- We do not put customer details in our logs or analytics.
- AI never sends anything to a customer by itself: it writes a draft, and a person at the shop decides.
Who helps us run the app
These companies process data for us, each only for the job listed:
| Company | What for | Where | When |
|---|---|---|---|
| Railway | Hosting, database and encrypted backups | United States | Always |
| Shopify | The store platform the app runs in; orders and customers come from Shopify | Worldwide | Always |
| Resend | Sends order emails to customers | United States | When email updates are on |
| Twilio | Business phone number: texts, calls, voicemail and transcripts | United States | When the shop turns on its phone number |
| Google Maps Platform | Turns delivery addresses into map points and route order | United States | When routes or the map are used |
| Anthropic (Claude) | Writes message drafts, card ideas, product copy and weekly reports | United States | Autopilot plan, when AI features are used |
| Uber Direct | On-demand delivery the shop books for an order | United States | When the shop books an Uber |
| Stripe | Tips for drivers, paid into the shop’s own Stripe account | United States | When tips are on |
| Telegram | Order alerts to the shop’s own staff chats | Worldwide | When the shop links Telegram |
| AI assistants the shop connects (for example ChatGPT or Claude) | Read orders the shop owner asks about | Set by that assistant | Only when the shop connects one |
How long we keep it
The app clears old personal data by itself every day:
| Data | Kept for |
|---|---|
| Names, emails, phones, addresses, card messages and notes on orders | 24 months after the delivery date |
| Emails and texts sent to customers | 24 months |
| Order photos (Ready and delivery photos) | 12 months |
| Text conversations in the inbox | 24 months |
| Call log, voicemail recordings and transcripts | 24 months |
| Driver locations shared while on a route | 30 days |
| AI message drafts | 3 months |
| Review requests and private feedback | 24 months |
| Yearly occasion reminders (after the last one sent) | 24 months |
| Win-back email records | 24 months |
| Order history (who moved an order and when) | 24 months |
| Uber delivery records (driver name, proof photo link) | 24 months |
| Access log (who opened customer data) | 12 months |
| Finished background tasks | 30 days |
Kept longer on purpose: “don’t email me” and STOP requests (so we keep respecting them), and tip payment records (tax law). Encrypted backups expire after 7 days (daily) and 28 days (weekly).
When a shop uninstalls the app, Shopify tells us 48 hours later and we delete everything we hold for that shop.
Your rights
Customers of a shop should contact that shop first: it decides about its customers’ data. Shopify passes privacy requests (access and deletion, under laws such as GDPR and the CCPA) to us automatically, and we act on them: a deletion request erases that customer’s details from the shop’s orders in FloristPilot. A shop can also email us and we will help within 30 days.
Security
Data is encrypted in transit and at rest, access is limited and logged. Details: Security.
Children
FloristPilot is a business tool and is not meant for children under 16.
Changes
If we change this policy, we post the new version here. If a change matters to how a shop’s data is used, we tell shops in the app before it takes effect.
Contact
Dopamine Flowers LLC, Honolulu, Hawaii, USA · hello@floristpilot.com