Privacy Policy

Last updated: October 13, 2026

What we collect

When you sign up for the free plan or buy a subscription we collect your email address, the domain of your Magento store and your license key (we keep only a hash of the key and an encrypted copy). For a purchase we also keep the Stripe customer and subscription numbers and the language and time of the purchase. Payment details are handled by Stripe; we do not store card numbers. The extension sends us your license key and your store's domain to check your license.

What we do not collect

We do not store IP addresses (they are used in memory only, to limit the number of requests), your name, card numbers or the text of the emails we send. The extension runs on your own server: your products, orders and customers' personal data stay in your Magento, except as described in the next paragraph.

Requests to AliExpress

When you use the AliExpress features, the extension sends its requests to AliExpress through our gateway (gateway.getdropflow.com). Each request carries your license key, your store's domain and your AliExpress authorization; an order you place also carries the delivery details of that order (name, address and phone number of your customer). The gateway passes the request on to AliExpress. Its log records only the route, the result, the time, the first four characters of the license key and the name of the AliExpress call. To show live shipping prices at checkout, the extension sends AliExpress, through the gateway, the shopper's destination country (two letters), the AliExpress product and SKU numbers, the quantity, and the language, locale and currency settings; the shopper's name, phone number and address are not sent for this. When you connect your AliExpress authorization, the result is held in the gateway's memory for about 5 minutes at most and is not written to storage.

How we use data

To provide and secure your license and subscription service, bill you, send service messages, and improve the product. We do not sell personal data.

Third parties

Payments are handled by Stripe; Stripe's payment page is provided by Stripe and works under its own policy. License emails are sent by Resend. Our e-mail provider may keep a copy of the e-mails it sends under its own policy. This website and the license service are delivered through Cloudflare, and the encrypted backups of the license database are stored in Cloudflare R2. This website uses no analytics or advertising tools and sets no cookies of its own. Our hosting provider Cloudflare may set a technical cookie that it needs for security. These providers process data under their own policies.

Your rights

You can ask us to see, correct or delete your data by writing to [email protected]. Data of the free plan is deleted. Data of a paid license is anonymised; Stripe keeps its payment records under its own rules. Our encrypted backups are kept for about 30 days, so deleted data can remain in them for up to that long.

Changes

We will post changes on this page and update the date above.

GetDropFlow is operated by JinGuo Ren, an individual (sole proprietor), 10564 Clasico Ct, San Diego, CA 92127, USA. Contact: [email protected].