Privacy Policy

1. Who we are

Neo Flipbook (“Neo Flipbook”, “we”, “us”) makes the Neo Flipbook app for Shopify (the “App”), the viewer that displays your flipbooks, and the website at neoflipbook.com. Together these are the “Service”.

This policy explains what we collect, why we collect it, and the choices you have. It applies to merchants who install the App (“you”) and to shoppers who read flipbooks on a merchant’s store.

For merchant data, we decide how it’s used and act as the data controller. Where we handle data about your shoppers to run your flipbooks, we act on your behalf as your data processor.

If you have questions, email support@neoflipbook.com.

2. Information we collect from merchants

Store details

When you install the App, Shopify shares the following with us:

your shop name, shop domain, primary domain and the contact email on your Shopify store
your store’s app proxy path, and the access tokens that let the App call Shopify on your behalf, which we store encrypted
the permissions you approved, which are read products, read files and write files

We also save app preferences you set, such as dismissed notices and setup progress.

Content you create

Files. The PDFs and JPG or PNG images you upload or select, with their file name, type and size.
Flipbooks. Titles, settings, colors and display options.
Product catalogs. The products and collections you pick, and a snapshot of each product’s title, description (the first 300 characters), price, main image and product page link. We also save your shop’s name and currency format.

The App also writes to your store: it saves uploads to Shopify Files and keeps a small app-owned record of each flipbook, so your theme can show it.

Billing details

Shopify handles billing for the App. We receive your plan’s name, price and currency, plus your trial and billing dates. We never receive or store card or payment details.

Usage and technical data

When you use the App in Shopify admin, our servers keep a session record with your browser’s IP address and user agent. Sessions expire after 2 hours of inactivity.
Our servers log errors so we can keep the Service running. These logs can include your shop domain and details of the failed request.

Support conversations

If you email us or use live chat in the App, we keep your messages, your email address or shop domain, and anything else you choose to share.

What we don’t collect

The App does not ask for access to your customers, orders or staff accounts, and we never receive that data from Shopify.

3. Information about your shoppers

Flipbooks are built to be read without tracking anyone.

The viewer, the theme block and the full-page link set no cookies and run no analytics or advertising trackers.
We don’t collect or store shoppers’ names, email addresses or order details.
If a shopper bookmarks a page, the bookmark is saved in their own browser’s local storage. It is never sent to us.
To display a flipbook, the shopper’s browser loads your files from Shopify’s CDN or from Cloudflare, our storage provider. As with any web request, these providers receive the shopper’s IP address so they can deliver the content.
Shopify sends us customer data requests and customer erasure requests on your behalf. The App stores no personal data about shoppers, so there is nothing for us to return or erase.

You remain responsible for your store’s own privacy policy and for telling your shoppers about the apps your store uses.

4. How we use information

We use information to:

Provide the Service. We create, store, publish and display your flipbooks, build catalogs from your products, and save files to Shopify Files or our managed storage.
Manage your plan. We check which plan you’re on and apply its limits.
Support you. We answer questions and fix problems.
Keep the Service secure and reliable. We prevent abuse, investigate errors and enforce our Terms of Service.
Contact you about the Service. For example, we tell you about changes, security issues or problems with your account.
Meet legal obligations.

We don’t sell personal data, share it for advertising, or use it to build profiles about you or your shoppers.

5. Legal bases for processing

If you’re in the European Economic Area or the United Kingdom, we rely on these legal bases:

Contract. We need this information to provide the App you installed.
Legitimate interests. We use it to secure, support and improve the Service, in ways that don’t override your rights.
Legal obligation. We use it where the law requires us to.
Consent. Where we ask for your consent, you can withdraw it at any time.

We share information only when the Service needs it, and only with providers bound by confidentiality and data protection terms.

Provider	What they do for us	Information involved
Shopify	App platform, store APIs, file storage and billing	Store details, products, files and plan
Cloudflare	Managed file storage, network delivery and security, website hosting	Files in managed storage, and request data such as IP addresses
Our cloud hosting provider	Servers and databases that run the App and the viewer	The App data described in this policy
Crisp	Live chat inside the App, where available	Your shop domain and chat messages

We may also disclose information:

if the law requires it
to protect the rights, property or safety of our users, the public or us
as part of a merger, acquisition or sale of assets, in which case we will tell you before your information becomes subject to a different privacy policy

7. Published flipbooks are public

When a flipbook is visible to customers, anyone with its link can open it, and its embed code works on any website. The PDF and image files behind it are served from public web addresses on Shopify’s CDN or our managed storage.

Hiding or deleting a flipbook removes it from the viewer straight away. Its files, though, stay reachable at their direct addresses until you delete them from Shopify Files or from the Assets page in the App. Don’t upload anything you need to keep confidential.

8. How long we keep information

Information	How long we keep it
Store details, flipbooks and settings	While the App is installed
After you uninstall	Your flipbooks stop showing straight away. Shopify sends us an erasure request 48 hours later, and we then delete your store details, flipbooks, catalog data and managed storage files.
Flipbooks you delete	Removed from the viewer straight away. Any records left in our database are erased along with your shop’s data after you uninstall.
Files in managed storage	Until you delete them on the Assets page, or until your shop’s data is erased
Files in Shopify Files	They live in your store, and you control them
Admin sessions	Expire after 2 hours of inactivity
Unsaved live previews	Up to 1 hour
Support messages	As long as we need them to help you and keep a record of your requests
Error logs	Only as long as we need them to run and secure the Service

If you reinstall within the 48 hours, your flipbooks come back as you left them. We may keep limited information for longer when the law requires us to.

9. How we protect information

All traffic to the App, the viewer and this website is encrypted in transit with HTTPS.
Shopify access tokens are encrypted in our database.
We check uploads for file type and size before storing them.
Only people who need access to our production systems have it.

No system is perfectly secure. If a security breach affects your information, we’ll tell you, and the relevant authorities, as the law requires.

10. International transfers

We and our providers may process information in countries other than the one you’re in. Where the law requires it, we put safeguards in place before transferring personal data across borders, such as the European Commission’s Standard Contractual Clauses.

11. Your rights

Depending on where you live, laws such as the EU and UK General Data Protection Regulation, Malaysia’s Personal Data Protection Act 2010 and the California Consumer Privacy Act give you the right to:

access the personal data we hold about you
correct data that’s wrong or incomplete
delete your data
receive a copy of your data in a portable format
object to or restrict certain processing
withdraw consent you’ve given
complain to your local data protection authority

To use any of these rights, email support@neoflipbook.com from your store’s contact email, or tell us your shop domain. We’ll reply within the time the law requires. Uninstalling the App is the quickest way to delete your store’s data.

If you’re a shopper, contact the store you bought from first. We’ll help that merchant answer your request.

We don’t sell or share personal information as the California Consumer Privacy Act defines those terms.

12. Cookies and similar technologies

This website (neoflipbook.com). It sets no cookies and runs no analytics. Cloudflare processes technical data, such as IP addresses, to deliver and protect the site.
The App in Shopify admin. It uses two strictly necessary cookies: a session cookie that keeps you signed in, and a security token that protects your requests from forgery. Where live chat is available, Crisp may set its own cookies to run the chat.
The flipbook viewer. It sets no cookies. Shopper bookmarks are kept in the shopper’s own browser storage, as described in section 3.

We only use strictly necessary cookies, so we don’t show a cookie banner.

13. Children

The Service is for businesses and isn’t directed at children. We don’t knowingly collect personal data from anyone under 18.

14. Links to other sites

Our website and the App link to sites we don’t run, such as Shopify. Their own privacy policies apply when you visit them.

15. Changes to this policy

We may update this policy as the Service changes. We’ll change the “Last updated” date at the top of this page, and we’ll tell you about material changes in the App or by email before they take effect.

16. Contact us

For privacy questions or requests, email support@neoflipbook.com.

The short version