1. Service scope
FlowRelay is operated by Ordu Labs LLC. FlowRelay for Shopify Flow receives external JSON events for a merchant's configured FlowRelay endpoints, authenticates requests, validates required fields, records receipt facts, hands normalized triggers to Shopify Flow, provides searchable recent event history, supports diagnostics, and supports governed replay while retained data is available.
FlowRelay is not a generic iPaaS, workflow builder, broad Shopify Flow observability suite, custom transform service, or downstream workflow monitor. Shopify Flow remains the merchant's workflow engine.
2. Delivered handoff boundary
When FlowRelay marks an event as Delivered, it means FlowRelay handed the trigger to Shopify Flow. Delivered does not mean Shopify Flow branches, conditions, downstream app calls, fulfillment actions, emails, third-party systems, or business outcomes completed successfully. Merchants are responsible for configuring and reviewing Shopify Flow workflows and downstream systems.
3. Merchant and sender responsibilities
- Configure FlowRelay endpoints, Shopify Flow triggers, sender systems, payload paths, and resource IDs accurately.
- Keep endpoint URLs, endpoint secrets, static header values, HMAC signing keys, Shopify credentials, agent tokens, and other credentials private.
- Send only lawful, accurate, and necessary event payload data, and obtain any required notices, consents, or permissions.
- Use redacted examples in support requests and partner collaboration, not raw customer data, endpoint secrets, HMAC values, tokens, session details, or database URLs.
- Review replay previews carefully because replay can cause Shopify Flow side effects to run again.
- Authorize partners or agents only when they need access, choose the lowest useful authority, and revoke grants that are no longer needed.
4. Endpoint secrets and authentication
FlowRelay supports HMAC-SHA256 header authentication and static header secret authentication for sender requests. Merchants are responsible for placing endpoint secrets only in trusted sender secret managers or configuration systems. FlowRelay may store secret verification material needed to authenticate requests, but diagnostics and support-safe shares expose only limited metadata such as secret last four characters.
If a secret may be exposed, rotate it through FlowRelay and update the sender. Secret rotation returns the new secret once. Old secrets are not available through support, diagnostics, Agent Operations reads, or public pages.
5. Replay, duplicate, and recovery caution
Replay is a governed recovery action for retained events. A replay uses the current endpoint configuration and can cause Shopify Flow side effects to run again. Merchants, partners, and authorized agents must review replay previews, idempotency guidance, current endpoint readiness, and downstream business impact before confirming replay.
FlowRelay may refuse or block replay when the retained raw body has expired, when required context is unavailable, when the current configuration is unsafe, when plan limits block the action, or when the actor lacks scope.
6. Agent Access boundaries
Agent Access grants are merchant-authorized, store-scoped, scoped by authority tier, expiring or explicitly no-expiration, revocable, metered, and audited. Agents use the same Agent Operations API guardrails as the CLI and MCP endpoint where available.
Agents cannot self-escalate, mint or revoke their own grants, approve Shopify billing, access raw payloads by default, access old endpoint secrets, access Shopify tokens or sessions, access database URLs, perform broad exports, silently replay events, submit support outside scoped FlowRelay support paths or without consent, or edit Shopify Flow workflows without separate Shopify authorization.
7. Shopify billing and plan limits
Paid FlowRelay plans for the Shopify Flow edition are approved through Shopify billing before charges are created. FlowRelay plans may include monthly limits for accepted events, diagnostics shares, replay executions, Agent Operations reads, action intents, and executed actions.
Paid plans warn before accepted-event capacity runs out and use a controlled grace path before event intake stops. More capacity requires an upgrade, approved add-on, or custom plan. FlowRelay does not silently charge pay-as-you-go event overages by default. Existing event history, diagnostics shares, replay history, endpoint detail, and recovery guidance remain visible when a plan limit is reached.
Fees are non-refundable except where required by law or expressly stated in the applicable Shopify App Store listing, Shopify billing screen, or FlowRelay pricing terms. Taxes, billing administration, subscription approval, cancellation, and downgrade mechanics follow Shopify billing and the current listing. The Shopify App Store listing, Shopify billing screen, and FlowRelay pricing page control current prices and plan limits.
8. Support scope
FlowRelay support can investigate FlowRelay receipt facts: whether an event reached FlowRelay, passed authentication, matched endpoint requirements, mapped expected fields, and was handed to Shopify Flow. FlowRelay support cannot prove downstream Shopify Flow branches, app calls, emails, fulfillment actions, or third-party systems completed after Shopify Flow received the trigger.
Installed customers should start from the installed app support path when available. For the current Shopify Flow edition, use Shopify Admin support paths when available. Pre-install questions may go to support@flowrelay.app. Authorized agents may submit structured support requests only through scoped Agent Operations. FlowRelay provides commercially reasonable, best-effort support and does not provide a support response-time SLA unless separately agreed in writing. Diagnostics sharing is merchant-initiated, preview-first, and redacted.
9. Acceptable use
Do not use FlowRelay for unlawful activity, abusive traffic, spam, malware, credential harvesting, security testing without permission, attempts to bypass plan limits or access controls, attempts to extract secrets or raw private data, or misuse of Agent Operations. Do not send sensitive personal data unless it is necessary for the Shopify Flow workflow and you have the right to send it.
10. Suspension, termination, and uninstall
FlowRelay may suspend or restrict access for nonpayment, billing failure, abuse, security risk, excessive or harmful traffic, legal requirements, platform requirements, or violations of these terms. Merchants may uninstall the Shopify app or cancel/downgrade plans through Shopify-supported billing and app controls.
After uninstall or termination, FlowRelay may retain and delete data according to the Privacy Policy, retention schedule, Shopify privacy webhooks, and legal or billing obligations.
11. Privacy and data
The Privacy Policy is incorporated into these terms. Merchants remain responsible for the personal data, customer data, merchant data, sender data, and business records they or their senders submit to FlowRelay. FlowRelay may process data to provide the service, maintain security, enforce limits, keep audit records, support merchants, and comply with law or platform rules.
12. Service changes and availability
FlowRelay may change, maintain, update, or discontinue parts of the service. These terms do not promise uninterrupted service, uptime guarantees, data residency, security audits, or regulated compliance certifications. FlowRelay may update these terms by posting an updated version or providing notice through the service, Shopify, or email where appropriate.
13. Warranty disclaimer
To the fullest extent permitted by law, FlowRelay is provided as is and as available. Ordu Labs LLC disclaims implied warranties of merchantability, fitness for a particular purpose, non-infringement, and any warranties arising from course of dealing or usage of trade. FlowRelay does not guarantee Shopify Flow downstream completion, sender behavior, merchant workflow outcomes, uninterrupted service, or error-free operation.
14. Limitation of liability
To the fullest extent permitted by law, Ordu Labs LLC will not be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, lost revenue, lost data, lost business opportunity, downstream workflow outcomes, sender failures, third-party service failures, or business interruption.
To the fullest extent permitted by law, Ordu Labs LLC's aggregate liability for all claims related to FlowRelay is limited to the fees paid to FlowRelay for the service during the six months before the event giving rise to the claim. For free or trial use, the cap is $0 or the minimum amount required by applicable law.
15. Indemnity
Merchants are responsible for their sender systems, payload data, credentials, Shopify Flow workflows, downstream systems, and use of FlowRelay. To the fullest extent permitted by law, merchants will defend and indemnify Ordu Labs LLC from claims arising from unlawful or unnecessary payload data, credential exposure caused by the merchant or sender, misuse of the service, sender or downstream workflow behavior, violation of these terms, or violation of third-party rights.
16. Governing law and disputes
These terms are governed by the laws of Texas, without regard to conflict-of-law rules. Before filing a claim, the parties will try to resolve the dispute through written notice and 30 days of informal resolution. That informal-resolution period does not limit urgent requests for equitable relief, security or abuse response, nonpayment or collections activity, or actions required by Shopify, another platform, or law.
Subject to the informal-resolution process above, disputes will be brought in the state or federal courts located in Dallas County, Texas, and each party consents to those courts for disputes related to these terms or FlowRelay.