Privacy Policy
Last Updated: February 7, 2026
Introduction
Welcome to A7 Flow ("we," "our," or "us"). A7 Flow is a SaaS Order Management & Shipping Platform based in Algeria, dedicated to helping merchants manage their e-commerce operations efficiently.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application (https://a7flow.pro) and our integrations with third-party services such as ZRExpress, Guepex, Shopify, YouCan, and Meta Platforms.
Data We Collect
Name, business name, email address, phone number, and encrypted password.
End-customer details (name, address, phone) and product details for fulfillment.
API Tokens (ZRExpress, Guepex), OAuth Tokens (Shopify, Meta, TikTok), and imported order data.
IP addresses, browser type, interaction logs, and session cookies.
How We Use Your Data
We process your data to provide a seamless experience:
- Service Delivery (Orders & Tracking)
- Sync Integrations (Shopify/Meta)
- Fraud Prevention & Security
- Platform Improvement
- Customer Support
Third-Party Data Sharing
We do NOT sell your data. We only share data with processors required to provide the service.
| Third Party | Data Shared | Purpose |
|---|---|---|
| ZRExpress & Guepex | Order details | Physical delivery |
| Shopify | Order Status & IDs | Sync status |
| Meta | Messages | Chat Automation |
| TikTok Inc. | Video assets, captions, and account tokens | Authorized video publishing via Content Posting API |
| Supabase | All Encrypted Data | Hosting & DB |
User Rights (GDPR)
To exercise these rights, email us at: privacy@a7flow.pro|View our dedicated Data Deletion Instructions
Data Security
Bank-Grade Encryption
We implement industry-standard security measures including SSL/TLS encryption for data in transit and AES-256 for sensitive data at rest (API Tokens, Passwords). Access is strictly limited to authorized personnel.
Data Retention
We retain your personal data only for as long as is necessary. Upon your request to delete your account, all personal data will be permanently deleted within 30 days, unless required for legal obligations.
Cookies Policy
We use cookies mainly for session management (keeping you logged in) and basic analytics to improve performance. You can control cookies through your browser settings.
Platform Compliance
Meta Platforms (Facebook & Instagram)
We comply strictly with Meta Platform Terms and Developer Policies. Data received from Facebook & Instagram (pages, reels, instagram_content_publish) is used solely for the features you authorized. We do not use this data for surveillance, profiling, or unauthorized targeting.
TikTok Developer & Content Posting API
OpenAPI v2 VerifiedA7 Flow complies strictly with the official TikTok Developer Terms of Service, Content Posting API Guidelines, Commercial Partner Policies, and User Privacy Standards.
user.info.basic, user.info.profile: Identity discovery, verified avatar, and display name.video.publish, video.upload: Direct scheduled video and creator photo post publishing.- Bank-Grade Encryption: All TikTok OAuth tokens, refresh tokens, and open IDs are encrypted at rest with AES-256-GCM and transmitted exclusively via TLS 1.3.
- No Password Storage: A7 Flow never requests, handles, or stores TikTok passwords; authentication is mediated 100% via TikTok's official OAuth 2.0 dialog.
- Ceiling & Anti-Ban Safeguards: In strict compliance with TikTok policies, publishing is managed with a 20 posts / 24h ceiling per account to protect creator accounts from automated spam penalties.
- Zero Data Selling or Model Training: We strictly never sell, license, or monetize creator data, and never use user videos to train public artificial intelligence models.
- Ephemeral Video Buffer: Video uploads are securely streamed to TikTok's upload endpoint and automatically purged from temporary buffers upon job completion.
- Automated Deauthorization Webhook: Revoking access in TikTok settings immediately triggers our verified webhook (
/api/tiktok/deauthorize) to delete all cached credentials.
YouTube API Services
A7 Flow utilizes YouTube API Services to allow creators to schedule and publish YouTube Videos and YouTube Shorts. By using our YouTube integration, you agree to be bound by the YouTube Terms of Service.
- We access Google account info strictly via OAuth 2.0 (
youtube.uploadscope). - Tokens are securely encrypted in our private database and never shared with third parties.
- You can revoke A7 Flow access at any time via the Google Security Settings page.
Shopify Partner Integration
We act as a Data Processor for Shopify merchants, complying with Shopify's Data Processing Addendum (DPA). Customer data is handled securely and only for order fulfillment and tracking.
12. Contact Us
Have questions about your data?
Our privacy team is available to assist you.