Last updated: 19.07.2025
1. Introduction
[Your Company Name] (“we”, “us”, or “our”) is committed to protecting the privacy and security of our customers and users worldwide. This Privacy Policy describes how we collect, use, share, and protect your personal data when you use our automation services, applications, APIs, and integrations (hereafter, the “Services”).
By using our Services, you agree to the practices described in this Privacy Policy.
2. Information We Collect
a) Personal Information
We may collect the following personal information when you:
- Register for our Services (e.g., name, email, billing address, phone)
- Contact our support team
- Subscribe to newsletters or marketing communications
b) Business Data
We process data you provide when using our Services, including data transferred via automated integrations, APIs, or third-party apps (such as customer data, workflow content, logs, and attachments).
c) Payment and Billing Information
For global purchases, we may collect payment details such as credit card numbers, VAT/tax IDs, and transaction data, processed via secure third-party payment processors.
d) Automatically Collected Data
We collect technical information (IP address, browser type, device identifiers, usage logs, and cookies) for security, analytics, and product improvement.
e) Third-Party Integrations
When you connect third-party apps (such as Google, Shopify, WooCommerce, CRM tools), we only process the data necessary to fulfill your required automations.
3. How We Use Your Data
- To provide, operate, and maintain our Services
- To enable and secure automated workflows and integrations as requested
- To communicate account-related information, technical updates, security alerts, and marketing (where permitted)
- To process transactions and manage billing
- To comply with legal, regulatory, and tax obligations
- To analyze and improve our Services
4. Legal Bases for Processing
If you are located in the EEA/UK, we process your personal information only when permitted by law, including:
- To fulfill a contract (service delivery)
- With your consent (marketing, newsletters)
- For our legitimate interests (security, product enhancement)
- To comply with legal obligations
5. Sharing of Data
We may share your information with:
- Trusted service providers/processors (hosting, payment, analytics, communication tools)
- Third-party apps and APIs you connect to our platform (with your consent or API authorization)
- Regulatory/government authorities if required by law
- Affiliates and subsidiaries for internal business purposes
- In the event of a merger, acquisition, or asset sale (with notice)
We do not sell your personal data.
6. Data Storage & International Transfers
Your information may be processed and stored on servers in countries where we or our service providers operate. We implement industry-standard security measures and, where required, rely on approved transfer mechanisms (e.g., Standard Contractual Clauses for EU data).
7. Data Retention
- We retain your data as long as needed for the purposes described, and as required by law (tax, audit, etc.)
- You may request deletion of your account and data at any time (see Your Rights).
8. Your Rights
Depending on your location, you may have rights to:
- Access, update, correct, or delete your personal information
- Object to or restrict our processing
- Opt-out of marketing communications (unsubscribe links included in all marketing emails)
- Port your data (where applicable)
To exercise these rights, please contact us at: [info@28flow.com]
9. Data Security
We use physical, technical, and administrative measures to safeguard your data, including encryption, access controls, and secure hosting. However, no online service is 100% secure; use strong passwords and protect your account credentials.
10. Children’s Privacy
Our Services are not intended for users under the age of 16. We do not knowingly collect personal data from children.
11. Changes to this Policy
We may update this Privacy Policy from time to time. Changes are effective when posted or notified. Continued use of our services means you accept any updates.
12. Contact Us
Questions or concerns about privacy?
Contact: 28Flow Agency
Data Protection Officer
28Flow
Beblerjev trg 14, 1000 Ljubljana
[info@28flow.com]
