← Back to Home

Privacy Policy

Last updated: February 13, 2026

1. Introduction

ClientFlow ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Account Information

When you register for ClientFlow, we collect:

  • Business name and contact information
  • Email address
  • Password (encrypted)
  • Business address and phone number
  • Payment information (processed securely through Stripe)

2.2 Customer Data

You input customer information into our Service, including:

  • Customer names and contact details
  • Visit history and check-ins
  • Reviews and ratings
  • Loyalty points and rewards
  • Appointment information

2.3 Usage Information

We automatically collect certain information when you use our Service:

  • Log data (IP address, browser type, pages visited)
  • Device information
  • Cookies and similar tracking technologies
  • Usage patterns and preferences

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our Service
  • Process your transactions and send confirmations
  • Send you technical notices and support messages
  • Respond to your comments and questions
  • Monitor and analyze trends, usage, and activities
  • Detect, prevent, and address technical issues and fraud
  • Send marketing communications (with your consent)

4. Data Sharing and Disclosure

4.1 We Do NOT Sell Your Data

We will never sell, rent, or trade your personal information or customer data to third parties for marketing purposes.

4.2 Service Providers

We may share your information with trusted third-party service providers:

  • Stripe - Payment processing
  • Twilio - SMS messaging
  • Resend - Email delivery
  • Neon/Vercel - Database and hosting
  • Mapbox - Address autocomplete

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

4.3 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities.

5. Data Security

We implement industry-standard security measures to protect your data:

  • SSL/TLS encryption for data in transit
  • Encrypted passwords using bcrypt
  • Secure database with access controls
  • Regular security audits and updates
  • Limited employee access to personal data

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. If you close your account, we will delete your data within 30 days, except where we are required to retain it for legal or compliance purposes.

7. Your Rights

You have the right to:

  • Access - Request a copy of your personal data
  • Correction - Update or correct inaccurate information
  • Deletion - Request deletion of your account and data
  • Export - Download your customer data
  • Opt-out - Unsubscribe from marketing emails
  • Object - Object to certain data processing activities

To exercise these rights, please contact us at privacy@clientflow.com

8. Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, some parts of our Service may not function properly without cookies.

9. Children's Privacy

Our Service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us immediately.

10. International Users

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using our Service, you consent to this transfer.

11. GDPR Compliance

If you are located in the European Economic Area (EEA), you have certain data protection rights under GDPR. We process your data based on:

  • Your consent
  • Performance of our contract with you
  • Compliance with legal obligations
  • Our legitimate business interests

12. CCPA Compliance

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request deletion of your data.

13. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy, please contact us: