ShadowFlow Privacy Policy

ShadowFlow Privacy Policy

Last updated: October 20, 2026

1. Introduction

ShadowFlow is a private desktop application developed and operated by PUH DABEX Karol Dembowski, operating under the Mr.shadowbox brand.

ShadowFlow is used internally to manage customer inquiries, commissions, shipping records, invoices, and related business correspondence.

This Privacy Policy explains how ShadowFlow accesses, processes, stores, and protects information, including data obtained through Google APIs.

2. Information We Process

Depending on the functionality used, ShadowFlow may process:

  • Customer names, email addresses, and contact details.

  • Customer inquiries, email messages, and conversation metadata.

  • Commission and order information.

  • Shipping and invoicing records.

  • Gmail message IDs, thread IDs, sender and recipient information, timestamps, subjects, and message content.

3. Google API and Gmail Data

ShadowFlow integrates with Gmail through Google's OAuth 2.0 authorization system.

With the account owner's authorization, ShadowFlow may:

  • Retrieve Gmail conversations associated with customer inquiries.

  • Read email messages and conversation metadata.

  • Display relevant correspondence within the application.

  • Send email replies initiated by the authorized user.

  • Synchronize email conversation history to maintain accurate customer records.

ShadowFlow does not send emails without a user-initiated action, except where an automated sending feature has been explicitly enabled by the user.

Google account credentials are not collected or stored by ShadowFlow. OAuth credentials and tokens are used to authorize access to Gmail.

4. How Information Is Used

Information is processed exclusively for legitimate business operations, including customer communication, commission management, order administration, shipping documentation, and recordkeeping.

Google user data is not used for advertising, profiling, or training artificial intelligence models.

5. Data Storage and Security

ShadowFlow primarily operates as a locally installed desktop application.

Application records and synchronized correspondence may be stored in local application databases. OAuth tokens are protected using Windows Data Protection API (DPAPI).

Where necessary for enabled features, certain business information may also be processed through configured external services.

Reasonable technical measures are used to restrict unauthorized access to stored information.

6. Data Sharing

ShadowFlow does not sell Google user data or share it with advertisers or data brokers.

Information may be processed by third-party services only when necessary to provide explicitly configured business functionality, subject to the relevant service's terms and privacy practices.

7. Google API Limited Use Disclosure

ShadowFlow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Google user data is accessed and used only to provide the user-facing features described in this Privacy Policy.

Google user data is not transferred to third parties for advertising purposes or sold.

8. Data Retention and Deletion

Information is retained only for as long as reasonably necessary for the application's business purposes or applicable legal obligations.

The account owner may request deletion of locally stored synchronized Gmail data and associated application records, subject to legal retention requirements.

Revoking Google account access prevents further authorized Gmail API access but does not automatically delete previously synchronized local records.

9. Revoking Gmail Access

The account owner may revoke ShadowFlow's access to their Google account at any time through:

https://myaccount.google.com/connections

Revoking access will disable Gmail-dependent features until authorization is restored.

10. Contact

For privacy-related inquiries, please contact:

PUH DABEX Karol Dembowski
Mr.shadowbox
Email: mr.shadowbox2@gmail.com
Website: https://mrshadowbox.com

11. Changes to This Policy

This Privacy Policy may be updated to reflect changes to ShadowFlow's functionality, applicable legal requirements, or Google API policies.

The latest version will be published on this page.