Welcome to Flowdesk. We value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, share, and protect information when you access or use our website, applications, business automation tools, integrations, and related services (collectively, the “Services”).By using our Services, you acknowledge that you have read and understood this Privacy Policy.

Business and Customer Data

When using our automation, CRM, workflow, project, finance, HRM, inventory, customer portal, or other business modules, you may provide or process information such as:

1. Customer and contact information
2. Leads and CRM records
3. Tasks, projects, and workflow information
4. Invoices, quotes, orders, and transaction records
5. Documents and uploaded files
6. Employee or team member information
7. Communication records
8. Form submission data
9. Custom fields and business-specific data

You are responsible for ensuring that you have the necessary rights and permissions to upload and process such information through our Services.

Artificial Intelligence Features

Some features may use artificial intelligence or third-party AI providers. When an AI-powered feature is used, relevant information may be transmitted to the AI service provider to generate the requested response or perform the requested action. Users should avoid submitting sensitive or confidential information to AI features unless they have permission to do so and understand how the applicable AI provider processes such information. Where possible, we limit the information shared with AI providers to what is necessary to provide the requested functionality.

Third-Party Integrations

Our Services may integrate with external applications operated by third parties. Your use of these services is also governed by the privacy policies and terms of those providers. We are not responsible for the privacy practices, availability, security, or content of third-party services. You may disconnect supported third-party integrations from your account when such functionality is available.

 Multi-Tenant Data Protection

Our platform may operate using a multi-tenant architecture where multiple businesses use the same application infrastructure. We implement logical access controls intended to keep each organization's data separated from other organizations. Users may only access information authorized for their account, organization, role, or assigned permissions.

Customer Data Requests

When our customers use the platform to process information about their own customers, employees, contacts, or users, the business account owner may act as the primary controller of that information while our platform acts as a service provider or processor. If your information was provided to our platform by one of our customers, you should normally contact that business directly regarding access, correction, or deletion requests.

We will reasonably assist account owners with valid data requests where required.

Children's Privacy

Our Services are intended for businesses and professional users and are not designed for children. We do not knowingly collect personal information from children below the minimum legal age required in the applicable jurisdiction. If we become aware that such information has been collected improperly, we may take reasonable steps to remove it.

International Data Transfers

Our infrastructure, service providers, or third-party integrations may process information in countries other than your own. Where required, we take reasonable measures to ensure that international transfers are handled in accordance with applicable data protection requirements.

Account Security

Users are responsible for protecting their accounts and should:

1. Use strong passwords
2. Keep authentication credentials confidential
3. Protect API keys and access tokens
4. Restrict team permissions appropriately
5. Immediately report suspicious account activity

We are not responsible for unauthorized access resulting from credentials that a user voluntarily shares or fails to adequately protect.

Marketing Communications

Where permitted, we may send information regarding:

• Product updates
• New features
• Service announcements
• Offers and promotions

You may unsubscribe from promotional emails using the unsubscribe option included in those communications. Essential account, billing, security, and transactional communications may still be sent when necessary.

Business Transfers

If our company is involved in a merger, acquisition, restructuring, financing, sale of assets, or similar transaction, information associated with the Services may be transferred as part of that transaction. Any successor organization will be expected to handle information in accordance with applicable privacy requirements.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

• Changes to our Services
• New features
• Regulatory requirements
• Security practices
• Operational changes

The updated version will be published on our website with a revised “Last Updated” date. Continued use of the Services after an updated Privacy Policy becomes effective constitutes acknowledgment of the updated policy where permitted by law.