Last updated: May 10, 2025

1. Introduction

Flow Sync is committed to protecting your personal information and ensuring compliance with applicable data protection laws, including Pennsylvania’s data privacy regulations, the General Data Protection Regulation (GDPR) for EU residents, the California Consumer Privacy Act (CCPA) for California residents, and the Children’s Online Privacy Protection Act (COPPA). This Privacy Policy explains how we collect, use, share, and protect your personal information when you visit our website or use our services. If you have questions, contact us at [email protected].

2. Information We Collect

We collect the following types of information:

a. Personal Information You Provide:

- Name, email address, phone number, and other contact details.

- Billing and payment information (e.g., credit card details, billing address).

- Information provided through forms, surveys, account creation, or customer support inquiries.

- Demographic information (e.g., age, preferences).

b. Automatically Collected Information:

- Usage data (e.g., pages visited, time spent on the site, clicks).

- Device and browser information (e.g., IP address, browser type, operating system, device identifiers).

- Location data (inferred from IP address, unless explicitly provided).

- Information collected via cookies and similar technologies (see our Cookie Policy).

c. Information from Third Parties:

- Data from social media platforms if you interact with us via social media (e.g., profile information).

- Data from analytics or advertising partners, used in accordance with their privacy policies.

3. How We Use Your Information

We use your information for the following purposes:

- To provide, maintain, and improve our website and services, including processing transactions and fulfilling orders.

- To personalize your experience, such as tailoring content or recommendations.

- To communicate with you, including responding to inquiries, sending order confirmations, or providing service updates.

- To analyze website usage and performance to enhance functionality and user experience.

- To deliver targeted advertising or marketing communications, where permitted by law.

- To comply with legal obligations, such as tax reporting or responding to lawful requests.

- To protect Flow Sync’s rights, safety, or property, including fraud prevention and security monitoring.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

- With service providers (e.g., hosting, payment processing, analytics, marketing) who assist in operating our website, bound by confidentiality and data protection agreements.

- With third-party advertising partners to deliver personalized ads, where you have consented or as permitted by law.

- To comply with legal obligations, such as responding to subpoenas, court orders, or regulatory requirements.

- To protect Flow Sync’s rights, safety, or property, or to investigate fraud or security issues.

- With your consent, such as when you opt into marketing campaigns or third-party integrations.

- In connection with a business transaction (e.g., merger, acquisition), where your data is transferred subject to equivalent protections.

5. Cookies and Tracking Technologies

We use cookies and similar technologies (e.g., web beacons, pixel tags) to enhance your experience, analyze usage, and deliver personalized content. For details, including types of cookies (necessary, functionality, analytical, advertising, social media) and how to manage them, see our Cookie Policy at [Your Cookie Policy URL]. You can adjust your browser settings or use opt-out tools (e.g., optout.aboutads.info) to control cookies, though this may affect website functionality.

6. Data Security

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. These measures include encryption, access controls, and secure servers. However, no internet-based service is 100% secure, and we cannot guarantee absolute security. If a data breach occurs, we will notify affected users and authorities as required by law (e.g., within 72 hours for GDPR).

7. Your Data Protection Rights

Depending on your location, you have the following rights regarding your personal information:

- Access: Request a copy of your personal data.

- Rectification: Request correction of inaccurate or incomplete data.

- Erasure: Request deletion of your data, subject to legal obligations (e.g., tax records).

- Restriction: Request we limit processing of your data in certain circumstances.

- Portability: Request transfer of your data to another organization in a machine-readable format.

- Object: Object to certain types of processing, such as direct marketing or automated decision-making.

- Withdraw Consent: Withdraw consent at any time where processing is based on consent, without affecting prior processing.

- CCPA Rights (California Residents): Request disclosure of data collected, sold, or shared; opt-out of data sales (note: we do not sell data); request deletion; and non-discrimination for exercising rights.

- GDPR Rights (EU Residents): Additional protections, including the right to lodge a complaint with a supervisory authority.

To exercise these rights, contact us at [Your Contact Email]. We will respond within the timeframes required by law (e.g., 30 days for GDPR, 45 days for CCPA). We may verify your identity to process requests. If we cannot fulfill a request (e.g., due to legal obligations), we will explain why.

8. International Data Transfers

If you are outside the United States, your data may be transferred to and processed in the U.S., where our servers are located. We ensure appropriate safeguards for international data transfers, such as Standard Contractual Clauses for GDPR compliance or reliance on Privacy Shield frameworks (where applicable). By using our services, you consent to such transfers, subject to these safeguards.

9. Children’s Privacy

Our website and services are not intended for individuals under 13 years of age, in compliance with COPPA. We do not knowingly collect personal information from children under 13. If we become aware of such data, we will delete it promptly. If you believe a child under 13 has provided us with information, contact us at [Your Contact Email].

10. Data Retention

We retain personal information only as long as necessary to fulfill the purposes outlined in this policy or as required by law. For example:

- Transaction data is retained for 7 years to comply with tax and accounting regulations.

- Account data is retained until you request deletion or your account becomes inactive for 2 years.

- Usage data is retained in anonymized form for analytics purposes.

When data is no longer needed, we securely delete or anonymize it.

11. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for their privacy practices or content. We recommend reviewing the privacy policies of any third-party sites you visit.

12. Do Not Track Signals

Some browsers transmit “Do Not Track” (DNT) signals. As there is no uniform standard for DNT, our website does not currently respond to DNT signals. You can manage tracking through cookie settings or opt-out tools as described in our Cookie Policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website and updating the “Last updated” date. For material changes, we may provide additional notice (e.g., via email or website banner). Continued use of our website or services constitutes consent to the updated policy.

14. Contact Us

For questions about this Privacy Policy, to exercise your data protection rights, or to report concerns, contact us:

- By email: [Your Contact Email]

- By visiting: [Your Contact Page URL]

15. Supervisory Authority

If you are in the EU and believe we have not addressed your GDPR concerns, you may lodge a complaint with your local data protection authority. A list of authorities is available at https://edpb.europa.eu/about-edpb/board/members_en.

16. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Commonwealth of Pennsylvania, consistent with applicable federal and international data protection laws. Any disputes will be resolved through binding arbitration in Pennsylvania, as outlined in our Terms of Service.