Privacy Notice

1. Who we are

ClientFlow AI is operated by Clientflowai ("we", "us"). We are the data controller for the personal data described in this notice. Questions about privacy can be sent through our help center.

2. Personal data we collect

• Account data — name, email address, hashed login credentials, business name and profile details.
• Business content — leads, contact details you upload, conversations, knowledge base entries, automations and review campaigns you create.
• Support data — the tickets and messages you send us.
• Usage and technical data — feature usage, AI request counts, log data, device identifiers and IP address.

Card and billing details are collected and processed by Paddle, our Merchant of Record. We never receive or store full payment card numbers.

3. Why we use it, and our legal basis

• Providing the service (account creation, storing your leads, generating AI replies, sending review requests) — performance of our contract with you.
• Customer support — performance of our contract.
• Security, fraud prevention and abuse monitoring — our legitimate interests in keeping the platform safe.
• Product improvement and aggregate analytics — our legitimate interests in improving the service.
• Marketing emails — your consent, withdrawable at any time.
• Accounting, tax and legal compliance — compliance with a legal obligation.

4. Who we share data with

• Service providers and subprocessors — cloud hosting, database and email infrastructure, and AI model providers that process prompts to generate responses.
• Paddle.com, our Merchant of Record, for the sale of subscriptions, payments, subscription management, invoicing and tax compliance.
• Professional advisers such as accountants and lawyers, where necessary.
• Authorities, where we are required to do so by law.

We do not sell personal data.

5. International transfers

Our providers may process data outside your country, including outside the UK and EEA. Where that happens we rely on appropriate safeguards, such as an adequacy decision or Standard Contractual Clauses.

6. Retention

We keep account and business content for as long as your account is active. After you close your account we delete or anonymise your data within 90 days, except records we must keep for legal, tax or accounting purposes, which are retained for the period required by law.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to our use of your personal data, to receive a portable copy, and to withdraw consent at any time. UK and EEA users may also lodge a complaint with their supervisory authority. Contact us through the help center and we will respond within one month.

8. Security

We use appropriate technical and organisational measures, including encryption in transit, row-level access controls that isolate each business's data, and least-privilege access for staff.

9. Cookies

We use essential cookies and local storage to keep you signed in and to remember your plan selection during checkout. We use limited analytics cookies to understand product usage. You can clear or block cookies in your browser, though essential cookies are required for the app to work. We do not use advertising cookies.

10. Changes

We will update this notice as the service changes and will revise the date above. Material changes will be notified in-app or by email.