Privacy Policy

Flow collects information needed to create, secure, operate, support, and improve your account and workspace.

• Account information, such as your name, email address, login information, profile details, workspace name, business type, and account settings.
• Workspace data, such as clients, contacts, opportunities, notes, tasks, files, messages, forms, workflows, calendar items, phone records, reports, and business activity that you or your team add to Flow.
• Billing information, such as plan status, invoices, payment status, billing contact information, usage charges, and subscription details. Flow does not directly store full payment card numbers.
• Integration information, such as connection status, authorized permissions, sync settings, and data needed to operate integrations that you choose to connect.
• Usage, device, and security information, such as IP address, browser type, device type, approximate location, log data, session activity, feature usage, and security events.
• Support information, such as messages, attachments, screenshots, or details you provide when contacting Flow support.

Flow uses information only for legitimate business purposes related to providing and protecting the Flow platform.

• To create and manage user accounts and workspaces.
• To provide Flow features, including clients, contacts, workflows, tasks, files, forms, scheduling, reports, communications, and integrations.
• To sync data from integrations that you choose to connect.
• To send account, security, billing, support, product, and service-related communications.
• To process subscriptions, invoices, workspace usage, add-ons, and billing adjustments.
• To maintain platform security, investigate abuse, prevent fraud, and protect users.
• To troubleshoot errors, improve reliability, and provide customer support.
• To build, maintain, and improve Flow features.
• To comply with legal obligations where required.

Workspace data belongs to the workspace and its authorized users. Flow does not claim ownership over the clients, contacts, notes, messages, files, workflows, opportunities, tasks, forms, reports, or other business records that you add to your workspace.

Flow accesses workspace data only to provide the service, maintain security, troubleshoot issues, support your account, follow your instructions, enforce platform rules, or comply with valid legal obligations.

Flow does not use your workspace data to advertise to your clients or customers. Flow does not sell workspace data.

Flow does not sell, rent, or trade user data. Flow does not share workspace data with third parties for their own marketing purposes.

Flow may share limited information only in the situations below.

• Service providers: Flow uses trusted vendors that help operate the platform, such as hosting, storage, email delivery, payment processing, communications, analytics, security, and support. They may process information only as needed to provide services to Flow.
• User-directed integrations: If you connect an integration, Flow may send or receive data from that integration based on the permissions you approve. You can disconnect integrations from your settings.
• Workspace members: If you invite team members, they may be able to view, edit, export, or manage workspace data depending on their permissions.
• Business transfers: If Flow is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction. We will require any successor to honor the privacy commitments that apply to your data.
• Legal requirements: Flow will only disclose user information when required by valid legal process or applicable law, and only after reviewing the request for validity, scope, jurisdiction, and necessity.

Flow is built with a privacy-first approach. Law enforcement, government agencies, and other third parties do not have direct access to Flow accounts or workspace data through the platform.

Flow will not create backdoor access to user data. Flow will not voluntarily disclose workspace data to law enforcement or government agencies.

If Flow receives a subpoena, court order, warrant, or other legally binding request, Flow will require valid legal process, review the request carefully, limit disclosure to what is legally required, and challenge or reject overbroad, improper, or unlawful requests when appropriate.

When legally permitted, Flow will notify the affected user or workspace before disclosing information so they have an opportunity to object or seek legal protection. Flow may be legally prohibited from notifying users in some circumstances.

Flow uses administrative, technical, and organizational safeguards designed to protect user data. These safeguards may include access controls, authentication, encryption in transit, secure infrastructure, monitoring, backups, audit activity, and limited internal access.

No internet service can guarantee complete security. Users are responsible for protecting passwords, limiting workspace access to trusted team members, reviewing connected integrations, and promptly removing users who should no longer have access.

Flow keeps information for as long as needed to provide the service, comply with legal obligations, resolve disputes, enforce agreements, maintain security, support billing records, and operate the business.

Users may request deletion of their account or workspace data. Some limited information may be retained where necessary for billing, tax, legal, security, backup, fraud prevention, compliance, or dispute-resolution purposes.

Flow gives users and workspace owners control over their information and workspace settings.

• Access and update account settings.
• Manage workspace information and team access.
• Connect or disconnect integrations.
• Manage communication preferences and opt-out settings.
• Request account deletion or workspace data deletion.
• Request export of workspace data where available.

Flow may use cookies, local storage, and similar technologies to keep users logged in, remember preferences, secure sessions, understand platform usage, and improve reliability. Flow does not use cookies to sell personal information.

Flow is not intended for children under 13. Flow does not knowingly collect personal information from children under 13. If Flow learns that a child has provided personal information, Flow will take reasonable steps to delete it.

Flow may process information in the United States and other locations where Flow or its service providers operate. By using Flow, you understand that information may be processed in countries with different data protection laws than your location.

Flow may update this Privacy Policy from time to time. If changes are material, Flow will provide notice through the platform, email, or another reasonable method. The updated policy will be effective when posted unless stated otherwise.

For questions about this Privacy Policy or your data, contact Flow at support@myflowportal.com.