Field service data,
handled with care.

Dollflow Install is a Shopify installation, repair, and field-dispatch application operated by Great Big AB. This policy applies when a merchant installs or administers the app, a customer schedules or manages a visit, or a technician uses a Dollflow mobile work portal.

• Turn eligible Shopify purchases into installation jobs and scheduling invitations.
• Calculate availability using skills, coverage, working hours, travel buffers, appointments, and temporary slot holds.
• Dispatch technicians, provide secure mobile work portals, document completion, and synchronize job status.
• Send scheduling invitations, confirmations, reminders, cancellations, and operational notifications.
• Support included installation, paid repairs, deposits, and on-site balance records.
• Protect the service, prevent abuse, troubleshoot failures, meet legal duties, and respond to privacy requests.

We do not sell personal information, provide it to data brokers, or use it for interest-based advertising.

We process the connected calendar identifier, granted scopes, encrypted OAuth refresh token, busy-time responses, synchronization state, and event identifiers. We do not copy or display the technician’s unrelated event titles, descriptions, attendees, or other calendar content.

Google user data is used only to provide the visible Calendar features, secure those features, comply with law, or as otherwise permitted by the Google API Services User Data Policy, including its Limited Use requirements. It is not used for advertising, credit decisions, or sale. A technician or merchant can disconnect Calendar from the app.

Merchants can require before-and-after or completion photos. Photos may show the product, installation area, completed work, or incidental surroundings. Merchants and technicians should avoid photographing people, documents, security codes, or unrelated private areas unless necessary and lawful.

Technician portals use private, expiring links. Portal links and customer scheduling links must not be forwarded. Evidence files are available only to authorized merchant staff and the assigned technician through protected app routes.

Information is shared only as needed to provide Dollflow Install, follow merchant instructions, protect users, complete a safeguarded business transfer, or comply with law. Current providers include:

Job and operational records are retained while the merchant uses Dollflow Install and for a reasonable period needed for service delivery, disputes, accounting, security, and legal obligations. Merchants configure job-evidence retention; the current default is 180 days, after which expired photo evidence is eligible for deletion.

Shopify customer-redaction requests remove customer identity, contact details, address, notes, completion notes, photos, private access links, email recipients, and connected Calendar event references from matching jobs. Shopify data requests generate an export for the verified merchant privacy process. Shopify shop-redaction requests delete the shop and its associated DFI records and app sessions.

Disconnecting Google Calendar deletes the encrypted connection token from Dollflow Install. Events already stored in the Google account remain controlled by that account unless removed through the connected scheduling workflow.

Depending on applicable law, individuals may have rights to access, correct, delete, restrict, object to, or export personal information and to withdraw consent. Customers should first contact the Shopify merchant that collected their information. Dollflow assists merchants through Shopify’s authenticated customer data-request and redaction webhooks.

Merchants can change reminder settings, disconnect Google Calendar, remove technicians, delete jobs where available, or uninstall the app. We may need to verify identity and authority before acting on a direct request.

Dollflow Install uses encrypted transport, tenant isolation, authenticated Shopify webhooks, hashed private-link tokens, encrypted Google OAuth refresh tokens, expiring portal access, audit records, dependency maintenance, and tested export and redaction logic. No internet service can guarantee absolute security.

Providers may process information outside the country where it was collected. Where required, recognized safeguards such as adequacy decisions, data-processing agreements, or standard contractual clauses are used.

Great Big AB may update this policy when DFI’s features, providers, or legal requirements change. Material changes will be communicated where required and the update date will be revised.