Privacy Notice

This notice explains how Flowops ("FlowOps", "we", "us") handles personal data when you visit our site or use the FlowOps workspace. Flowops is the data controller for the personal data described here. For data you upload about your own clients and staff inside your workspace, you are the controller and we act as your processor.

1. Data we collect and why

• Account data (name, work email, password hash, job title, avatar, workspace and role) — to create and secure your account and provide the Service. Legal basis: performance of our contract with you.
• Workspace content (projects, tasks, clients and contacts, CRM records, files, calendar events, invoices and expenses) — to deliver the features you use. Legal basis: performance of contract.
• Support messages (emails, enquiry forms) — to answer you. Legal basis: legitimate interests in supporting our customers.
• Security and login data (IP address, device/browser information, login history, audit logs) — to prevent fraud and abuse and to keep accounts secure. Legal basis: legitimate interests and legal obligation.
• Usage and telemetry (pages used, feature events, error reports) — to keep the Service reliable and improve it. Legal basis: legitimate interests, or consent where required.
• Marketing preferences — to send product news if you ask for it. Legal basis: consent, withdrawable at any time.

We do not need or want special category data. Payment card details are collected and handled by Paddle.com, not by us.

2. Who we share data with

• Service providers / subprocessors — hosting and database infrastructure, email delivery, optional analytics and AI-assisted features, acting on our instructions. See our list of subprocessors.
• Merchant of Record — Paddle.com, for the sale of subscriptions, subscription management, payments, invoicing and tax compliance.
• Professional advisers — legal, accounting and audit advisers where needed.
• Authorities — where we are legally required to disclose data.

We do not sell personal data.

3. International transfers

Some of our providers may process data outside the UK/EEA. Where that happens we rely on an adequacy decision or on Standard Contractual Clauses together with appropriate technical measures.

4. Retention

We keep account and workspace data while your workspace exists. Cancelling a subscription or the end of a free trial does not immediately delete workspace data; the workspace becomes read-only and its data remains available for export. You can request deletion of your account or workspace from Settings → Data & Privacy or by contacting us. Deletion requests are reviewed and processed by our team. We do not currently delete data automatically on a fixed schedule. Some records may be retained where required for legal, tax, billing, fraud-prevention, security or other legitimate compliance purposes.

5. Your rights

Subject to applicable law you may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests. Where processing is based on consent you may withdraw it at any time. Contact us at hello@flowops.it.com and we will respond within one month. If you are in the UK/EEA you also have the right to complain to your local data protection supervisory authority.

6. Security

We apply technical and organisational measures including encrypted connections (HTTPS), database access rules that separate each workspace, role-based permissions, private file storage, multi-factor authentication for internal operator access, and operator audit logging. See our Security page for details.

7. Cookies

We use strictly necessary cookies and local storage to keep you signed in and to remember preferences such as theme; these cannot be switched off. With your consent we use Google Analytics 4 for aggregate product usage statistics; we do not use marketing technologies. You can change or withdraw consent at any time via Cookie preferences. See our Cookie Policy for details.

8. Contact

Flowops — hello@flowops.it.com.