Privacy Policy

1.1 Information you provide

• Account & business info: legal name, business name, EIN, business address, phone, email, website, industry, expected activity.
• Beneficial-owner & control-person info (for KYC/KYB): name, residential address, date of birth, government ID number, photo ID image.
• Payment info processed by our payment processor (e.g., Paddle); we do not store full card numbers.
• Configuration data: Smart Node rules, payees, schedules, tax-jurisdiction settings.
• Communications you send us (support emails, in-app messages).

1.2 Information from connected services

• Point-of-sale (POS) providers you connect: sales transactions, products, locations, taxes, refunds.
• Bank/financial-data aggregators (e.g., Plaid): account identifiers, balances, transactions — only for accounts you connect.
• Tax portals: credentials you choose to store for filing; passwords are encrypted at rest.
• Identity-verification vendors: verification results, risk signals, OFAC/sanctions screening outcomes.

1.3 Information collected automatically

• Device & log data: IP address, browser, OS, device identifiers, timestamps, pages viewed, actions taken.
• Cookies and similar technologies (essential cookies for login/session; limited analytics cookies).
• Error/diagnostic data when something goes wrong, to help us fix it.

• Provide and operate the Service, including running allocations, syncing data, and initiating transfers you authorize.
• Verify identity and prevent fraud, money laundering, and sanctions evasion (KYC/KYB, OFAC screening, transaction monitoring).
• Comply with legal obligations and Partner Bank requirements.
• Communicate with you about your account, support, security, and product updates.
• Improve and secure the Service, including analytics, debugging, and threat detection.
• With your consent or as otherwise permitted by law, send you marketing communications (you can opt out at any time).

Where required (e.g., for users protected by GDPR-style laws), we rely on the following legal bases: performance of a contract with you; compliance with legal obligations (BSA/AML, sanctions, tax); our legitimate interests in operating, securing, and improving the Service; and your consent (which you may withdraw at any time).

• Partner Banks and money-movement providers: to open accounts and execute transfers you authorize.
• Service providers (sub-processors): hosting, identity verification, fraud and sanctions screening, analytics, email delivery, payment processing (e.g., Paddle), customer support tooling. Each is contractually bound to protect data and use it only to perform services for us.
• Connected services you authorize (POS, payroll, tax portals, accounting software).
• Legal & safety: to comply with law, valid legal process, or to protect rights, safety, and property of FlowifyOS LLC, our customers, or others.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets; we will require the recipient to honor this Policy.

We do NOT sell personal information, and we do not share personal information for cross-context behavioral advertising.

We use a small number of cookies and similar technologies. Strictly necessary cookies are required for login, security, and core functionality. Analytics cookies, where used, help us understand how the Service is used so we can improve it. You can control cookies through your browser settings; disabling essential cookies may prevent the Service from working.

We retain personal information for as long as needed to provide the Service and to meet our legal, regulatory, fraud-prevention, and dispute-resolution obligations. KYC/KYB records and BSA/AML supporting data are retained for a minimum of five (5) years from account closure, as required by law. Backups are retained on a rolling cycle and overwritten on a documented schedule.

• Encryption in transit (TLS 1.2+) and at rest (AES-256).
• Principle of least privilege for production access; multi-factor authentication required for staff.
• Secrets stored in a managed vault; sensitive credentials are encrypted with separate keys.
• Logging, monitoring, and an incident-response plan; we will notify affected users and regulators of material breaches as required by law.

No system is 100% secure. You are responsible for keeping your account credentials safe and using strong, unique passwords.

Depending on where you live, you may have rights to: (a) access the personal information we hold about you; (b) correct inaccurate information; (c) request deletion (subject to our legal retention obligations); (d) restrict or object to certain processing; (e) data portability; (f) withdraw consent; and (g) lodge a complaint with a supervisory authority. To exercise any of these rights, email us at support@flowifyos.com. We will verify your request and respond within the timeframes required by applicable law.

California, Colorado, Connecticut, Virginia, and other state residents have specific rights under their state privacy laws, including the right to know, delete, correct, and opt out of certain processing. We do not sell personal information and do not share personal information for cross-context behavioral advertising. To exercise rights, email support@flowifyos.com.

The Service is intended for users in the United States. If you access it from outside the U.S., you understand your information will be transferred to and processed in the United States, which may have different data-protection laws than your home country.

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

Our Service may link to third-party websites or services we do not control. Their privacy practices are governed by their own policies.

We may update this Policy from time to time. Material changes will be announced in-product or by email at least fifteen (15) days before they take effect. The “Effective” date at the top reflects the most recent version.

See also our Terms of Service.

FlowifyOS LLC
Email: support@flowifyos.com
Website: https://flowifyos.com