Privacy Policy

What Personal Information We Collect. When you visit our website, we automatically collect certain information about your device, including your web browser type, IP address, time zone, and cookies placed on your device. We also collect information about the pages and products you view, the websites or search terms that brought you to our site, and how you interact with it. We refer to this as "Device Data." We collect Device Data using cookies (small data files placed on your device that often include a unique anonymous identifier; to learn more or disable them, visit https://www.allaboutcookies.org), log files (which track actions on our site and collect data such as your IP address, browser type, internet service provider, referral and exit pages, and timestamps), and web beacons, tags, and pixels (electronic files used to record information about how you use our site). When you make or attempt to make a purchase, including enrolling in a subscription, we collect personal information including your name, billing address, shipping address, payment details, email address, and phone number. We refer to this as "Order Data."

Together, Device Data and Order Data are referred to as "Personal Information" throughout this policy.

How We Use Your Personal Information. We use Order Data primarily to process and fulfill your orders, including one-time purchases and recurring subscription orders, handling payment, managing shipping and tracking, and sending invoices or order confirmations. We also use it to communicate with you about your order, subscription, or account, including confirming changes such as a cancellation, pause, or refund request, to assess orders for potential fraud or risk, and to send you product updates or marketing communications based on your preferences. We use Device Data to detect and prevent fraud, particularly through IP address monitoring, and to improve and optimize our website, for example by analyzing how customers navigate our site and measuring the effectiveness of our marketing campaigns.

Sharing Your Personal Information. We share your Personal Information with trusted third-party service providers to help us operate our business. These include:

Shopify, our e-commerce platform and payment processing (https://www.shopify.com/legal/privacy)
Payment processors used at checkout, such as Shopify Payments and PayPal, to process your payment securely
Our subscription management provider, to bill and manage recurring orders
Our fulfillment and shipping partners, including carriers and our order tracking provider, to deliver your order and provide tracking updates
Our email and SMS marketing providers, to send order notifications and, where you have opted in, marketing communications
Google Analytics, to understand how customers use our site (https://policies.google.com/privacy; opt out at https://tools.google.com/dlpage/gaoptout)
Meta (Facebook and Instagram) and other advertising partners, who use pixels and similar technologies to measure our campaigns and deliver targeted ads that may be relevant to you (https://www.facebook.com/privacy/policy; general information at https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work)

We may also share your Personal Information when required by law, in response to a subpoena or court order, or to protect the legal rights of RootFlow.

Advertising & Tracking Choices. You can opt out of targeted advertising by adjusting your ad settings with Meta and Google, through the Network Advertising Initiative opt-out page (https://optout.networkadvertising.org), or by disabling cookies in your browser. Disabling cookies may affect how our website functions.

Your Privacy Rights. Depending on your state of residence, you may have certain rights regarding your Personal Information under U.S. law. California residents (CCPA/CPRA) have the right to know what Personal Information we collect, request deletion or correction of their data, and opt out of the sale or sharing of their Personal Information for targeted advertising. Residents of other U.S. states, such as Virginia, Colorado, Connecticut, Utah, Texas, and Oregon, may have similar rights under their state's privacy laws. To exercise any of these rights, contact us at support@getrootflow.com. We will respond within the timeframe required by applicable law and will not discriminate against you for exercising your rights.

Data Retention. We retain your Order Data for as long as necessary for business, legal, and administrative purposes, including maintaining a record of subscription history, cancellations, pauses, and refund or credit requests. If you would like us to delete your Personal Information, contact us at support@getrootflow.com and we will process your request in accordance with applicable law.

Data Security. We use appropriate technical and organizational measures to protect your Personal Information, including secure (SSL) transmission of payment data. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Children's Privacy. Our website is not directed at individuals under the age of 13. We do not knowingly collect Personal Information from children. If you believe a child has provided us with Personal Information, contact us immediately at support@getrootflow.com.

Text Messaging. By providing your mobile number, you agree to receive recurring automated marketing and order-related text messages from RootFlow. Consent is not a condition of purchase. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except for vendors and aggregators that assist us in delivering text messages to you. Message frequency varies. Message and data rates may apply. You can opt out at any time by replying STOP to any message, and you can reply HELP for assistance.

Changes to This Policy. We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any updates will be posted on this page with a revised effective date. We encourage you to review this policy periodically.

Contact Us. For questions about this Privacy Policy, your Personal Information, or to submit a privacy request, contact us at support@getrootflow.com. We respond to all inquiries within 24 hours.