Terms & conditions

Ecomflows.io
Flows Marketing Solutions LLC
Wyoming, United States

Last updated: March 23, 2026

1. Introduction

These Terms of Service (“Terms”) govern the access to and use of services provided by Flows Marketing Solutions LLC, operating as Ecomflows (“Ecomflows”, “we”, “us”, or “our”).

By purchasing, accessing, or using any Ecomflows service, you agree to be bound by these Terms.
If you do not agree, you may not use our services.

‍

2. Services Overview

Ecomflows provides email marketing and retention services for e-commerce businesses, including but not limited to:

One-time email flow setups
One-time API and technical integrations
Ongoing campaign management
Retention strategy and optimization
Post-purchase communication systems
Data-driven performance analysis
Access to internal dashboards or tooling (where applicable)

Ecomflows offers 3 primary service types:

‍

a) One-Time Services

Certain services, such as flow setups or integrations, are delivered as a one-time purchase with no recurring contract or ongoing obligation.

‍

b) Ongoing Campaign Services

Campaign services are provided on a month-to-month basis, starting immediately upon activation, with no fixed minimum term unless explicitly agreed otherwise.

‍

c) SaaS Platform Services

Ecomflows operates a software-as-a-service platform (the “Platform”) that connects to e-commerce shops’ Klaviyo accounts via Klaviyo’s OAuth 2.0 integration. The Platform provides:

Automated synchronization of Klaviyo account metadata, including flows, campaigns, segments, forms, and metrics
Analytics dashboards and performance reporting
Custom triggers and automation optimization
Aggregated benchmarking insights
Access to internal tooling and dashboards

To use the Platform, you must authorize Ecomflows to connect to your Klaviyo account via OAuth. The scope and nature of this data access is described in Section 8. The Platform’s functionality depends on the continued availability of Klaviyo’s API; Ecomflows does not guarantee uninterrupted access to Platform features in the event of changes to or discontinuation of Klaviyo’s API (see Section 19).

‍

3. No Guarantees

Ecomflows does not guarantee any specific outcomes, including but not limited to:

Revenue
Profit
Conversion rates
Deliverability
Platform approvals
Account health or stability

Any performance references, benchmarks, or examples shown are illustrative only and based on historical data.

‍

4. Client Responsibilities

You agree to:

Provide accurate and complete information
Grant required access to platforms such as Shopify, Klaviyo, or related tools
Maintain compliance with applicable laws and platform policies
Review and approve deliverables in a timely manner

Delays caused by missing access, approvals, or third-party issues may affect timelines and results.

‍

5. Payment, Fees & Billing

All fees are due as stated on the invoice
All services are non-refundable once an order has been placed
Revenue share agreements are calculated based on Klaviyo attribution
Invoices must be paid within the stated payment term

Failure to pay may result in escalation actions as outlined below.

‍

6. Non-Payment & Suspension

If payment is not received:

Services may be paused after approximately 24 days
Access to ongoing services may be suspended
The commercial relationship may be temporarily or permanently halted
Legal or administrative escalation may occur

Suspension or termination does not waive outstanding payment obligations.

‍

7. Campaign Attribution

Revenue share calculations are based on Klaviyo attribution, which may include open and/or click-based attribution windows.

You acknowledge that:

Multiple channels may influence a conversion
Klaviyo attribution reflects assisted or influenced revenue, not necessarily last-click attribution

This attribution model is accepted as the basis for billing.

‍

8. Data Access & Usage

‍

a) Scope of Data Access

By connecting your Klaviyo account to the Ecomflows Platform via OAuth, you authorize Ecomflows to access and process data from your Klaviyo account. The OAuth integration requests access to the following categories of Klaviyo data:

Profiles: Customer profile information, which may include personal data of the shop’s end-consumers such as email addresses, names, phone numbers, and associated metadata
Events: Purchase events, behavioral events, and custom events associated with end-consumer profiles, which may include purchase history, browsing behavior, and transactional data
Campaigns: Campaign metadata, performance metrics, and attribution data
Flows: Automated flow configurations, trigger types, and flow performance data
Segments: Segment definitions and membership criteria
Forms: Form configurations and submission metadata
Metrics: Key performance indicators and metric definitions
Accounts: Account-level configuration and settings

Profiles and Events data may include personal data of the shop’s end-consumers, including but not limited to email addresses, names, phone numbers, purchase history, and behavioral data. Such data is processed by Ecomflows as a Data Processor on behalf of the shop as Data Controller, as further governed by the Data Processing Agreement referenced in Section 11.

‍

b) Purpose of Data Access

Ecomflows accesses and processes this data solely for the purpose of providing the Platform services, including:

Generating analytics dashboards and performance reports
Enabling custom triggers and flow optimization recommendations
Producing aggregated benchmarking insights
Synchronizing account metadata to power Platform features
Supporting agency service delivery where applicable

‍

c) Data Storage and Processing

Ecomflows synchronizes and stores Klaviyo account metadata (flows, campaigns, segments, forms, metrics) on servers hosted on Google Cloud Platform in the European Union (EU region)
OAuth tokens are encrypted at rest using AES-256-GCM encryption and stored on GCP EU infrastructure
Data in transit is protected using TLS encryption
Access to data is controlled through Identity and Access Management (IAM) policies

‍

d) Aggregated and Anonymized Data

Ecomflows may process aggregated and anonymized data derived from connected accounts for the purposes described in Section 9. Such data does not identify individual clients, customers, or businesses.

‍

d) No Sale of Data

Ecomflows does not sell, disclose, or share identifiable store-level or customer-level data with third parties. All data used for internal insights is anonymized and non-identifiable.

‍

9. Internal Analytics & Aggregated Data

To improve our services, Ecomflows may process aggregated and anonymized data derived from client accounts. This data is used exclusively for:

Internal analytics
System optimization
Performance benchmarking
Product and service improvement

Aggregated data:

Does not identify individual clients or their customers
Cannot be traced back to a specific person or business
Is never sold or shared with third parties

‍

10. Data Retention & Deletion

‍

a) Active Accounts

For the duration of your use of the Platform, Ecomflows retains synchronized Klaviyo account metadata as necessary to provide the Platform services.

‍

b) Upon Disconnection or Termination

When you disconnect your Klaviyo account from the Platform or your service agreement is terminated:

OAuth tokens are revoked and permanently deleted immediately upon disconnection
All other personal data, including synchronized Klaviyo metadata, orders, campaigns, flows, segments, forms, and related data, will be permanently deleted within thirty (30) days of disconnection or termination
Aggregated, anonymized statistical data that cannot be traced to your account or your customers will be retained indefinitely for benchmarking and product improvement purposes

‍

c) Deletion Requests

You may request deletion of your data at any time by contacting us at legal@ecomflows.io. Deletion requests will be processed within thirty (30) days.

‍

11. Data Processing Agreement

If you use the Ecomflows Platform and connect your Klaviyo account, the Data Processing Agreement (“DPA”), which will be presented to you prior to connection and is published at https://www.ecomflows.io/legal/dpa, forms a binding addendum to these Terms. By using the Platform, you accept the DPA.

The DPA governs Ecomflows’ processing of personal data on your behalf as a Data Processor, in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws. The DPA includes Standard Contractual Clauses (SCCs) approved by the European Commission (Decision 2021/914) to ensure adequate safeguards for international data transfers.

‍

12. Acceptable Use

You may not use the Platform or Services to:

Process data you do not have lawful rights to access or control
Send unsolicited communications or spam
Violate applicable laws, regulations, or third-party rights, including Klaviyo’s terms of service
Interfere with or disrupt the Platform, its infrastructure, or other users’ access
Attempt to gain unauthorized access to systems, data, or accounts not belonging to you
Use the Platform in connection with any illegal activity

Ecomflows reserves the right to suspend or terminate access immediately if it reasonably believes a violation of this section has occurred. You are solely responsible for ensuring that your use of the Platform complies with all applicable laws and the terms of any third-party platforms you connect.

‍

13. Sub-Processors

Ecomflows uses third-party sub-processors to deliver the Services and operate the Platform. These sub-processors may process personal data on behalf of Ecomflows in its capacity as Data Processor.

As of the date of these Terms, Ecomflows engages the following sub-processors:

Google Cloud Platform (Google LLC)

purpose : Infrastructure hosting, database, background processing

Location : EU (Europe)

Firebase Authentication (Google LLC)

purpose : User authentication and token verification only

Location : US (global service)

Stripe Inc.

purpose : Payment processing (where applicable)

Location : US (PCI-DSS compliant)

Sentry (Functional Software Inc.)

purpose : Error tracking and monitoring (no PII transmitted)

Location : US

Additional sub-processors used for website operations and form processing (including Webflow and Make.com) are listed in the Privacy Policy.

The full and current list of sub-processors, including details on data protection obligations, is maintained in the Data Processing Agreement referenced in Section 11. Ecomflows will notify connected shops of any changes to its sub-processor list with at least thirty (30) days’ notice.

Ecomflows ensures that all sub-processors are bound by data protection obligations no less protective than those set out in the DPA.

‍

14. International Data Transfers

Flows Marketing Solutions LLC is a United States limited liability company organized under the laws of Wyoming. Despite this, all personal data processed through the Platform is stored and processed on servers located in the European Union (Google Cloud Platform, EU region).

To the extent that personal data is accessible by Ecomflows personnel located outside the European Economic Area, such transfers are governed by the Standard Contractual Clauses (Module 2: Controller to Processor) incorporated into the Data Processing Agreement referenced in Section 11.

‍

15. Account Termination

‍

a) Termination by You

You may terminate your use of the Platform at any time by disconnecting your Klaviyo account through the Platform interface or by contacting us at legal@ecomflows.io. Upon termination, data deletion will proceed as described in Section 10(b).

‍

b) Termination by Ecomflows

Ecomflows may terminate or suspend your access to the Platform immediately if:

You breach these Terms, including the Acceptable Use provisions in Section 12
You fail to make required payments
Your use of the Platform violates applicable laws or Klaviyo’s terms of service
Continued provision of services is no longer commercially viable

Upon termination by Ecomflows, data deletion will proceed as described in Section 10(b), unless retention is required by law.

‍

c) Survival

Sections 3, 5, 9, 10, 12, 14, 16, 17, 18, 19, 20, and 21 shall survive any termination or expiration of these Terms.

‍

16. Intellectual Property

All methodologies, templates, systems, dashboards, strategies, and materials developed by Ecomflows remain the intellectual property of Ecomflows.

Clients receive a limited, non-transferable license to use deliverables solely for their own business.

‍

17. Limitation of Liability

To the maximum extent permitted by law:

Ecomflows is not liable for indirect, incidental, or consequential damages
Total liability is limited to the fees paid by the client in the three (3) months preceding the claim

The limitations in this Section do not apply to: (i) death or personal injury caused by negligence; (ii) fraud or fraudulent misrepresentation; (iii) breaches of confidentiality or data protection obligations arising from gross negligence or willful misconduct; or (iv) any liability that cannot be excluded or limited by applicable law.

‍

18. Indemnification

You agree to indemnify and hold harmless Ecomflows from claims arising from:

Your business operations
Your products or services
Violations of laws or platform policies
Misuse of Ecomflows services
Your failure to comply with applicable data protection laws in your capacity as a Data Controller

‍

19. Force Majeure

Neither Party shall be liable for any failure or delay in performing its obligations under these Terms where such failure or delay results from circumstances beyond its reasonable control, including but not limited to: natural disasters, acts of government, pandemic, war, terrorism, power outages, internet or telecommunications failures, failures of third-party platforms (including Klaviyo and Google Cloud Platform), cyberattacks, or changes in third-party APIs or services.

The affected Party shall promptly notify the other Party and use reasonable efforts to mitigate the impact. If a force majeure event continues for more than sixty (60) days, either Party may terminate the affected Services without liability.

Klaviyo API dependency: The Platform’s functionality depends on the continued availability of Klaviyo’s API. Ecomflows does not guarantee uninterrupted access to Platform features in the event of changes to, restrictions on, or discontinuation of Klaviyo’s API, and such events shall not constitute a breach of these Terms.

‍

20. Governing Law & Dispute Resolution

These Terms are governed by the laws of the State of Wyoming, United States, without regard to conflict of law principles. The Data Processing Agreement is governed by its own terms, including the laws of Ireland for matters relating to the Standard Contractual Clauses, as specified in the DPA.

Any dispute arising out of or in connection with these Terms shall first be attempted to be resolved through good-faith negotiation. If negotiation fails, disputes shall be resolved by the courts of the State of Wyoming. Disputes arising under the SCCs shall be resolved as specified in the DPA.

‍

21. OAuth Consent & Acceptance

By connecting your Klaviyo account to the Platform via OAuth, you confirm that you have read, understood, and agreed to these Terms and the Data Processing Agreement referenced in Section 11.

This confirmation serves as your acceptance of both documents and constitutes a binding agreement between you and Ecomflows for the duration of your use of the Platform.

Ecomflows records the date, time, and version of these Terms and the DPA accepted at the time of connection for compliance and audit purposes.

‍

22. Modifications

Ecomflows reserves the right to update these Terms at any time. We will provide at least thirty (30) days’ notice of material changes by email or through the Platform.

Continued use of the services after thirty (30) days from the date of notice constitutes acceptance of the updated Terms. If you do not agree with the updated Terms, you must discontinue use of the services and disconnect your account before the end of the notice period.

‍

23. Severability

If any provision of these Terms is held to be unenforceable or invalid, such provision will be modified to the minimum extent necessary to make it enforceable, and the remaining provisions will continue in full force and effect.

‍

24. Contact

Flows Marketing Solutions LLC

Operating as Ecomflows

Email: legal@ecomflows.io

Website: https://ecomflows.io