Back to Home

Privacy Policy

Last updated: August 2026

1. Introduction

FlowIntake ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

2. Information We Collect

Information you provide:

  • Account information (name, email, firm name)
  • Client intake data submitted through forms
  • Payment information (processed securely by Stripe — we never store card details)
  • Communications with our support team

Information collected automatically:

  • Usage data and analytics
  • IP addresses and device information
  • Cookies and similar tracking technologies

3. How We Use Your Information

  • To provide and improve the Service
  • To process payments and manage subscriptions
  • To send notifications and updates you've opted into
  • To provide customer support
  • To comply with legal obligations

4. Data Storage and Security

  • All data is stored securely using Supabase (SOC 2 compliant)
  • Data is encrypted in transit (TLS) and at rest
  • We implement row-level security to ensure firm data isolation
  • We conduct regular security reviews

5. Client Intake Data

Data submitted through intake forms belongs to you and your firm. We process this data only to provide the Service. We do not use client intake data to train AI models or share it with third parties.

6. Third-Party Services

We use these third-party services to provide the Service:

  • Supabase — database and authentication
  • OpenAI — AI analysis (intake data is sent to OpenAI for processing)
  • Stripe — payment processing
  • Resend — email delivery
  • Vercel — hosting infrastructure

7. Data Retention

We retain your data for as long as your account is active. Upon account termination, you have 30 days to export your data. After 30 days, data is permanently deleted.

8. Your Rights (GDPR)

If you are in the European Economic Area or United Kingdom, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Object to processing of your data
  • Data portability

To exercise these rights, contact us at ahdamirji@gmail.com

9. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.

10. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal information from minors.

11. Changes to This Policy

We will notify you of significant changes to this Privacy Policy via email. Continued use of the Service constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions or to exercise your rights:

Email: ahdamirji@gmail.com