Privacy Policy

FlxFlow (“we,” “our,” or “us”) is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our workflow automation platform and associated services (collectively, the “Services”). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Services.

Information you provide directly:

• Account registration data (name, email address, job title, company name)
• Billing and payment information (processed via secure third-party payment processors)
• Content you create within the platform (workflows, forms, documents)
• Communications you send us (support requests, feedback, survey responses)

Information collected automatically:

• Log data (IP address, browser type, pages visited, timestamps)
• Device information (hardware model, operating system, unique device identifiers)
• Usage data (features used, actions taken, workflow runs)
• Cookies and similar tracking technologies (see our Cookie Policy)

Information from third parties:

• OAuth providers (Google, Microsoft) if you choose to sign in via SSO
• Integration partners when you connect third-party apps to FlxFlow

• Provide, operate, and improve the Services
• Process transactions and send related information (receipts, invoices)
• Send administrative messages, updates, and security alerts
• Respond to support requests and troubleshoot issues
• Send marketing communications (you may opt out at any time)
• Monitor and analyze usage patterns to enhance user experience
• Detect, prevent, and investigate fraud, abuse, and security incidents
• Comply with legal obligations and enforce our Terms of Service

If you are located in the European Economic Area or United Kingdom, our legal basis for processing your personal data is:

• Contract performance — to provide you with the Services you’ve requested
• Legitimate interests — to improve our Services, prevent fraud, and communicate with you
• Consent — for marketing emails and non-essential cookies (you may withdraw consent at any time)
• Legal obligation — to comply with applicable laws and regulations

We do not sell your personal information. We may share it in the following circumstances:

Service providers:

We share information with trusted vendors who assist us in operating the Services (cloud hosting, payment processing, analytics, customer support). These vendors are contractually bound to use your data only as directed by us.

Business transfers:

If FlxFlow is acquired, merged, or undergoes a change in ownership, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our site.

Legal requirements:

We may disclose your information if required by law, court order, or government authority, or when we believe disclosure is necessary to protect our rights or the safety of others.

We retain your personal information for as long as your account is active or as needed to provide the Services. You may request deletion of your account and associated data at any time by contacting us at privacy@flxflow.com. We will delete or anonymize your data within 30 days, except where we are required to retain it by law or for legitimate business purposes such as resolving disputes.

We implement industry-standard technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These include TLS encryption in transit, AES-256 encryption at rest, role-based access controls, regular security audits, and SOC 2-aligned practices. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

FlxFlow is based in India. If you access the Services from outside India, your information may be transferred to and processed in India or other countries where our service providers operate. When transferring data from the EEA or UK, we use Standard Contractual Clauses or other approved transfer mechanisms to ensure your data receives adequate protection.

Depending on your location, you may have the following rights regarding your personal information:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your personal data (“right to be forgotten”)
• Portability — receive your data in a structured, machine-readable format
• Restriction — request that we restrict processing of your data
• Objection — object to processing based on our legitimate interests
• Opt-out of marketing — unsubscribe from promotional emails via the link in any email

To exercise any of these rights, contact us at privacy@flxflow.com. We will respond within 30 days.

The Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly. If you believe we have collected information from a child, please contact us at privacy@flxflow.com.

The Services may contain links to third-party websites or allow you to connect third-party applications. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you access through FlxFlow. We are not responsible for the privacy practices or content of third-party services.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a notice within the Services at least 30 days before the changes take effect. Your continued use of the Services after the effective date constitutes your acceptance of the updated policy.