Data You Provide

Information that users or customers provide directly to set up accounts, to communicate with support, or to configure integrations is collected and processed for the functioning of the platform and related administrative tasks.

• Account and profile information: name, business email, job title, company name and contact phone number.
• Authentication and login credentials: usernames, hashed passwords and multi-factor authentication setup data.
• Billing and payment details: billing address, invoicing information and payment processor reference data required for subscription and invoicing.
• Support and communication content: messages, attachments and logs platform with customer support or account managers.
• Content uploaded to the platform: business documents, workflow configuration data, templates and metadata created or uploaded by users.
• Third-party integration credentials and settings when users choose to link external services (stored securely and only as required to maintain the integration).

Purposes of Processing

BizAppFlow processes personal data for specific operational, administrative and improvement purposes tied to the provision of our platform and related services.

• Provision and operation of the platform: to create and maintain user accounts, enable access to features, synchronize integrations and store customer data necessary for the service.
• Billing and business administration: to generate invoices, reconcile payments and manage subscriptions using payment service providers.
• Customer support and success: to respond to requests, troubleshoot issues and maintain communication records with account teams.
• Platform security and fraud prevention: to detect and prevent unauthorized access, malware, abuse and other security incidents.
• Service improvement and product development: to analyze aggregated usage patterns, identify bugs and prioritize feature updates.
• Legal compliance and record keeping: to maintain records required by law, tax or regulatory obligations and to respond to lawful requests.
• Optional marketing communications: where permitted, to send informational updates, product announcements and event invitations to consenting recipients.
• Data portability and export functions: to provide users with the ability to export their account data on request or as part of account closure procedures.

Data Subject Rights

If EU data protection rules apply to a user, the following data subject rights are available. BizAppFlow provides mechanisms to exercise these rights and responds in accordance with applicable law.

• Right of access: users may request confirmation whether we process their personal data and obtain a copy of their personal data in a commonly used format.
• Right to rectification: users may request correction of inaccurate or incomplete personal data.
• Right to erasure (where applicable): users may request deletion of personal data when retention is no longer justified subject to legal or contractual exceptions.
• Right to restriction of processing: users can request limits on the use of their personal data in certain circumstances.
• Right to object: users can object to certain processing based on legitimate interests or direct marketing.
• Right to data portability: users may request a structured, machine-readable copy of data they provided to transfer to another provider.

Data Sharing and Disclosure

BizAppFlow shares personal data with third parties only as necessary to deliver the platform, perform services on our behalf, comply with legal obligations or as part of corporate transactions. Third parties are bound by contractual obligations to protect data.

• Service providers and subprocessors such as cloud hosting, backup, monitoring and customer support platforms that process data on our instructions.
• Payment processors and business institutions to process subscription payments, refunds and billing reconciliation.
• Professional advisors and auditors when required for legal, tax or compliance reviews.
• Competent public authorities in response to lawful requests, court orders or to meet statutory obligations.
• Affiliated companies or successors in the event of a merger, acquisition or asset transfer, subject to data protection measures and notice to affected users.
• Third-party integrations selected by customers (for example CRM or accounting integrations) where customers authorize connection to external services.

Security Measures

BizAppFlow implements reasonable administrative, technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access. Security is integrated into our development and operational processes.

• Encryption in transit (TLS) and encryption at rest for stored data where appropriate.
• Role-based access controls and least-privilege principles for access to production systems and customer environments.
• Regular vulnerability scanning, patch management, backup procedures and incident response planning.

How to Submit a Rights Request

To exercise any data subject rights or to ask questions about this Privacy Policy, contact BizAppFlow using the details below. Requests should include a clear description of the right being requested and any relevant account identifiers. We may request additional information to verify identity before acting on a request.

[email protected]

We aim to respond to verifiable rights requests within 30 days. Where requests are complex or numerous, response times may be extended by a further period as permitted by applicable law; we will inform the requester if an extension is required.