Last updated: 11 October 2026. Operated by YTI Digital OÜ (Estonia). Contact: privacy@yti.digital.
SplitFlow ("the app") automatically splits Shopify orders into separate fulfillment orders based on rules a merchant configures. This policy explains what data the app accesses, stores, and why.
When an order is routed, Shopify notifies the app. To decide how to split the order, the app reads — via Shopify's Admin API — the order's fulfillment orders, their line items, and product attributes (vendor, SKU, tags, quantity). This is classified by Shopify as protected customer data because it relates to an order.
If a merchant adds suppliers, the app emails each supplier the part of an order it has to ship: the order number, product titles, SKUs and quantities, plus a private link. Behind that link the supplier sees the ship-to name, address and phone number of its open orders, read live from Shopify at that moment, and enters a tracking number, which the app records on the order in Shopify. The app does not store these customer details, does not put them in emails and does not log them. A shipped order stays visible to the supplier only as order number and tracking. The merchant decides who their suppliers are and can revoke any supplier's link at any time.
If a merchant uses "Describe it in your own words" in the rule builder, the sentence they type and product attributes from the store's recent orders — vendors, product tags, product types and SKUs — are sent to Anthropic (the Claude API) to draft a rule. No customer data is sent. Anthropic processes the request only to return the draft and does not use it to train its models. Nothing is saved until the merchant reviews the draft and adds the rule themselves.
Data is used solely to provide the app's functionality — evaluating your rules and splitting orders — and to support you. We limit our processing to the minimum data required for this purpose.
We do not sell your data or your customers' data, and we do not use it for advertising, profiling, or any purpose other than operating the app. The only party that sees customer details through the app is a supplier the merchant has added, and only for orders that supplier must ship (see "Supplier portal"). Emails to suppliers are sent through our email provider.
Data is encrypted in transit (HTTPS) and stored on access-restricted infrastructure. We retain data only while the app is installed.
When you uninstall the app, your data is deleted in response to Shopify's shop/redact
request (approximately 48 hours after uninstall). We honour Shopify's customers/data_request
and customers/redact requests; because we store no customer-identifying data, there is
nothing customer-specific to export or erase.
Merchants and their customers may exercise applicable data-protection rights (access, deletion, etc.) by contacting us at privacy@yti.digital or through Shopify's built-in data-request tools.
We may update this policy; material changes will be reflected here with a new "last updated" date.
How-to guides for splitting Shopify orders: splitflow.yti.digital/guides