Privacy Policy

1. Introduction

FloosFlow ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our invoicing and business management platform ("the Service").

Please read this Privacy Policy carefully. By using the Service, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly to us, including:

• Account Information: Name, email address, password, organization name, and country
• Business Data: Client information, invoices, quotations, projects, expenses, and payment records you create
• Financial Information: Payment details for subscription billing (processed securely by our payment provider)
• Communications: Messages you send to us for support or feedback

2.2 Information Collected Automatically

When you use the Service, we automatically collect:

• Usage Data: Pages visited, features used, time spent on the Service
• Device Information: Browser type, operating system, device type
• Log Data: IP address, access times, referring URLs
• Cookies: Session cookies for authentication and preferences

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and customer service requests
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent activities
• Personalize and improve your experience

4. Data Storage and Security

Your data is stored securely on servers located in secure data centers. We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Regular backups and disaster recovery procedures

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With vendors who help us operate the Service (hosting, payment processing, email delivery)
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Legal Requirements: When required by law or to protect our rights and safety
• With Your Consent: When you explicitly authorize sharing

6. Cloud Storage Integration

If you choose to connect third-party cloud storage services (such as Dropbox or Google Drive), we will:

• Only access your cloud storage with your explicit authorization
• Store files only in designated FloosFlow folders
• Store encrypted access tokens securely
• Allow you to disconnect at any time

7. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Export: Request your data in a portable format
• Objection: Object to certain processing of your data

To exercise these rights, contact us at privacy@floosflow.com.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. After account deletion, we may retain certain data:

• For legal and regulatory compliance
• To resolve disputes and enforce agreements
• As required by applicable law

9. Cookies

We use cookies and similar technologies to:

• Keep you logged in
• Remember your preferences
• Understand how you use the Service

You can control cookies through your browser settings, but disabling them may affect Service functionality.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information.

11. Children's Privacy

The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Service or sending you an email. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: