Privacy Policy CareerFlow: Careers Suite

Privacy Policy — CareerFlow: Careers Suite

Last updated: April 28, 2026

This Privacy Policy describes how OtheRiver ("we", "us", or "our"), developed by Alex Marcone, based in Teramo, Italy, collects, uses, and protects information in connection with the Shopify app CareerFlow: Careers Suite ("the App").

By installing and using the App, you agree to the practices described in this policy.

1. Who This Policy Applies To

This policy applies to two categories of users:

  • Merchants — Shopify store owners who install and configure the App.
  • Candidates — individuals who submit a job application through the careers section on a merchant's storefront.

2. Data We Collect

2.1 Data Collected from Candidates

When a candidate submits a job application through the App, we collect the following information:

  • First name and last name
  • Email address
  • Phone number (if provided)
  • Position applied for
  • Years of experience (if provided)
  • Message or personal introduction (if provided)
  • CV / Resume file (including file name, file type, file size, and file content)
  • Answers to custom application questions configured by the merchant
  • Any additional personal data submitted through custom fields created by the merchant

2.2 Data Collected from Merchants

When a merchant installs and uses the App, we collect and store the following information:

  • Shopify store domain
  • Shopify session and authentication tokens
  • Email address of the merchant or authenticated staff member
  • First name and last name of the Shopify user
  • Language preference
  • App configuration settings (careers section style, form fields, content, and email destination)

3. How We Use the Data

3.1 Candidate Data

  • Candidate submissions are stored in the App's database and made accessible to the merchant via the admin panel.
  • CV files remain downloadable from the merchant's admin for as long as the application is stored.
  • Each submission is also forwarded via email to the merchant's designated email address, with the CV attached.
  • We do not use candidate data for marketing, advertising, or any purpose other than delivering the job application to the merchant.

3.2 Merchant Data

  • Merchant data is used to authenticate the session, operate the App, and save the merchant's configuration.
  • We do not sell or share merchant data with third parties for marketing purposes.

4. Third-Party Services

The App uses the following third-party services to operate:

  • Shopify — the platform through which the App is installed and authenticated. Shopify's own privacy policy applies to data processed through their infrastructure.
  • Resend — used to deliver email notifications to merchants, including application summaries and CV attachments. Resend processes email content solely for delivery purposes.

We do not use analytics platforms, advertising trackers, or any other third-party data processors beyond those listed above.

5. Data Retention

Candidate applications and associated data are retained in the App's database for as long as the merchant keeps the App installed. Merchants can delete individual applications from their admin panel at any time.

Upon uninstallation of the App, merchant configuration data and associated candidate data may be deleted in accordance with Shopify's app uninstall requirements.

6. Data Security

We implement reasonable technical and organizational measures to protect the data collected through the App against unauthorized access, loss, or disclosure. All data is transmitted over encrypted connections (HTTPS).

7. Candidates' Rights

Candidates who have submitted an application through the App and wish to request access to, correction of, or deletion of their personal data may contact the merchant directly, as the merchant acts as the data controller for candidate submissions.

Candidates may also contact us at the address below if they have concerns about how their data is being handled.

8. Merchants' Rights

Merchants may request access to, correction of, or deletion of their data by contacting us at the address below. Uninstalling the App from the Shopify admin will trigger the removal of session data in accordance with Shopify's requirements.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected by updating the "Last updated" date at the top of this page. Continued use of the App after any changes constitutes acceptance of the updated policy.

10. Contact

If you have any questions or requests regarding this Privacy Policy, please contact us at:

OtheRiver — Alex Marcone
Teramo, Italy
apps@otheriver.com