Privacy Policy
How we collect, use, and share personal data. Version 1.0.
Effective: 2026-09-05 ÷ Version: 1.0
Flow processes account, messaging, booking, and billing data to operate this multi-tenant SaaS. We act as a processor for workspace customer data and as a controller for account holder data.
Categories: identity and contact details; WhatsApp message content; appointment answers/notes; payment configuration metadata (never full card numbers); usage and security logs; cookie consent records.
Rights (EEA/UK/CCPA): access, rectification, erasure, portability, restriction, and objection. Contact support for data subject requests. California residents may request a do-not-sell/share preference.
Retention: configurable via flow.privacy.retention_days; pruned by scheduled jobs. Subprocessors: see the Subprocessors page. This template must be counsel-reviewed before production use.
Flow is not a HIPAA-covered product by default. Do not store protected health information without appropriate agreements and controls.