Privacy Policy
Last updated: August 2026
1. Introduction
FlowIntake ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our Service.
2. Information We Collect
Information you provide:
- Account information (name, email, firm name)
- Client intake data submitted through forms
- Payment information (processed securely by Stripe — we never store card details)
- Communications with our support team
Information collected automatically:
- Usage data and analytics
- IP addresses and device information
- Cookies and similar tracking technologies
3. How We Use Your Information
- To provide and improve the Service
- To process payments and manage subscriptions
- To send notifications and updates you've opted into
- To provide customer support
- To comply with legal obligations
4. Data Storage and Security
- All data is stored securely using Supabase (SOC 2 compliant)
- Data is encrypted in transit (TLS) and at rest
- We implement row-level security to ensure firm data isolation
- We conduct regular security reviews
5. Client Intake Data
Data submitted through intake forms belongs to you and your firm. We process this data only to provide the Service. We do not use client intake data to train AI models or share it with third parties.
6. Third-Party Services
We use these third-party services to provide the Service:
- Supabase — database and authentication
- OpenAI — AI analysis (intake data is sent to OpenAI for processing)
- Stripe — payment processing
- Resend — email delivery
- Vercel — hosting infrastructure
7. Data Retention
We retain your data for as long as your account is active. Upon account termination, you have 30 days to export your data. After 30 days, data is permanently deleted.
8. Your Rights (GDPR)
If you are in the European Economic Area or United Kingdom, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Object to processing of your data
- Data portability
To exercise these rights, contact us at ahdamirji@gmail.com
9. Cookies
We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.
10. Children's Privacy
The Service is not directed to individuals under 18. We do not knowingly collect personal information from minors.
11. Changes to This Policy
We will notify you of significant changes to this Privacy Policy via email. Continued use of the Service constitutes acceptance of the updated policy.
12. Contact
For privacy-related questions or to exercise your rights:
Email: ahdamirji@gmail.com