Privacy Policy – MailAction

Overview

MailAction, formerly FlowRelay (“we”, “us”, or “our”), collects limited personal and technical information to operate the service and provide support.

Data Collection

When you install MailAction we receive basic store information from Shopify, including your store URL, store name, and email address. We also collect usage data about how the app is used — such as flows triggered and emails sent — and standard log data such as IP addresses and timestamps.

How We Use Your Information

We use the information we collect to provide and maintain the service, respond to support requests, and send you updates about MailAction when relevant.

Google User Data

If you connect a Gmail or Google Workspace account as an email provider, MailAction requests the following permissions from Google:

Send email on your behalf (gmail.send), used only to send the emails that your Shopify Flow workflows create, from the connected account.
Your email address (userinfo.email and openid), used to identify which account is connected and to set it as the sender address.

MailAction does not read, modify, or delete any messages in your mailbox, and does not access any other Google data.

Storage. We store the connected account’s email address and the access token Google issues for it on our servers. The token is used only to send email on your behalf.

Sharing. We do not sell, transfer, or share Google user data with third parties, except as necessary to provide the sending feature, to comply with applicable law, or as part of a merger or acquisition with your consent. We do not use Google user data for advertising, and we do not use it to develop, improve, or train generalized artificial intelligence or machine learning models.

Retention and deletion. When you remove the Gmail provider in MailAction, or uninstall the app, we delete the stored token and email address and revoke MailAction’s access with Google. If the same Google account is still connected to another store of yours, access stays in place for that store until you remove it there too. You can also revoke access at any time at myaccount.google.com/permissions.

MailAction’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not sell your personal data. We may share information with third-party providers that help us operate MailAction (such as hosting and infrastructure), subject to appropriate data processing agreements. We may also disclose information when required by law.

External Links

MailAction may contain links to third-party websites. This Privacy Policy does not apply to those sites — please review their respective policies independently.

Data Protection

We take reasonable technical measures to protect your information. No system is completely secure, but we work to minimise risk.

Policy Updates

We may update this policy from time to time. Changes will be posted on this page — we encourage you to check back periodically.

Contact

For any questions about this Privacy Policy, contact us at [email protected].

Last updated: September 29, 2026