Privacy Policy

Last Updated: April 4, 2025

1. Introduction

ProcessFlow ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://process-flow.io/ or use our application https://app.process-flow.io/ (collectively, the "Service").

We adhere to the General Data Protection Regulation (GDPR) and applicable French data protection laws. Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Data Controller Information

ProcessFlow, a company registered in France, is the data controller responsible for your personal data:

Company Registration Number: 951660422
Registered Address: Bures-sur-yvette
[email protected]

3. Collection of Personal Data

The data collected on the Service includes:

3.1 Data provided directly:

  • Name, email address, phone number when you create an account or subscribe to a service
  • Profile information such as job title, company name, and profile picture
  • Payment information when subscribing to paid plans
  • Information you provide when contacting our support team

3.2 Data collected automatically:

  • Through cookies and similar tracking technologies
  • Log data including IP address, browser type, pages visited
  • Device information such as device type and operating system

4. Google User Data

When you sign in with Google, we collect and process the following Google user data:

  • Basic profile information (name, email)

This data is used in accordance with Google's Limited Use requirements:

  • We only request data necessary for our service's core functionality
  • We do not transfer this data to third parties except as necessary to provide our service
  • We do not use Google user data for advertising purposes
  • We provide clear in-product notifications about how we use your Google data

4.1 Google Authentication

We use Google Sign-In to provide you with a convenient authentication method. When you choose to sign in with Google:

  • You will be redirected to Google to authenticate
  • You will be asked to grant permission for ProcessFlow to access specific profile information
  • You can review and manage these permissions at any time in your Google Account settings
  • We will only receive the information you explicitly authorize

4.2 Google Analytics and Tags

We use Google Analytics and similar services to understand how users interact with our Service:

  • These services use cookies and similar technologies to collect data about your interactions
  • The data collected includes pages visited, time spent on pages, and actions taken
  • This information helps us improve our Service and user experience
  • We have configured these services to anonymize IP addresses where possible
  • We do not combine this analytical data with personally identifiable information

5. Cookies and Similar Technologies

5.1 What Are Cookies

Cookies are small text files that are placed on your device when you visit our website. They allow us to recognize your device and remember certain information about your visit.

5.2 Types of Cookies We Use

We use the following types of cookies:

  • Essential Cookies: Necessary for the operation of our Service, such as cookies that enable you to log into secure areas.
  • Analytical/Performance Cookies: Allow us to recognize and count visitors and see how they move around our Service. This helps us improve the way our Service works.
  • Functionality Cookies: Used to recognize you when you return to our Service. This enables us to personalize our content for you and remember your preferences.
  • Targeting Cookies: Record your visit to our Service, the pages you have visited, and the links you have followed.

5.3 Third-Party Cookies

Some cookies are placed by third parties on our behalf:

  • Google Analytics cookies to analyze usage patterns
  • Authentication cookies for services like Google Sign-In
  • Other third-party service providers as needed to deliver our Service

5.4 Cookie Management

You can manage cookie preferences through your browser settings:

  • Most browsers allow you to refuse to accept cookies and to delete cookies
  • The methods for doing so vary from browser to browser
  • Blocking all cookies may impact your experience using our Service
  • To opt out of Google Analytics tracking, you can use the Google Analytics Opt-out Browser Add-on

6. Data Storage and Security

Your data, including Google user data, is stored securely:

  • Data is stored on secure servers
  • We retain data for 1 year or until you request deletion
  • We implement encryption and security best practices
  • We regularly review and update our security measures
  • We limit access to personal data to authorized personnel only
  • We maintain backup procedures to prevent data loss

7. How We Use Your Data

We use your personal data for the following purposes:

  • Providing the Service: To create and manage your account, authenticate you, and deliver the features and functionality of ProcessFlow.
  • Improving the Service: To analyze usage patterns, troubleshoot issues, and enhance the user experience.
  • Communication: To respond to your inquiries, provide support, and send service-related notifications.
  • Marketing: With your consent, to inform you about new features, updates, and promotional offers. You can opt out of marketing communications at any time.
  • Analytics: To understand how users interact with our Service and measure the effectiveness of our features.
  • Legal Obligations: To comply with legal requirements, enforce our Terms of Service, and protect our rights and the rights of others.

8. Legal Basis for Processing

Under GDPR, we process your personal data based on one or more of the following legal grounds:

  • Performance of Contract: Processing necessary for the performance of our contract with you to provide the Service.
  • Legitimate Interests: Processing necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.
  • Legal Obligation: Processing necessary for compliance with a legal obligation to which we are subject.
  • Consent: Processing based on your specific consent for certain processing activities, such as marketing communications.

9. Data Sharing and Disclosure

We may share your information with:

9.1 Service Providers

Third-party vendors who provide services on our behalf, such as:

  • Hosting and infrastructure providers
  • Payment processors
  • Analytics services
  • Customer support tools

All service providers are contractually obligated to use your data only for the purposes of providing services to us and in compliance with applicable data protection laws.

9.2 Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

9.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

9.4 With Your Consent

We may share your information with third parties when we have your consent to do so.

10. International Data Transfers

Your information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ.

If you are located outside France and choose to provide information to us, please note that we transfer the data to France and process it there.

When we transfer personal data outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as:

  • Standard Contractual Clauses approved by the European Commission
  • Binding Corporate Rules
  • Adequacy decisions by the European Commission

11. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • As long as your account is active
  • As needed to provide you with the Service
  • As necessary to comply with our legal obligations
  • As necessary to resolve disputes and enforce our agreements

When your account is deleted, we will retain certain information for a limited period to:

  • Comply with legal obligations
  • Resolve disputes
  • Prevent fraud
  • Enforce our Terms of Service

12. Your Data Protection Rights

Under GDPR and French data protection laws, you have the following rights:

  • Right to Access: You have the right to request copies of your personal data.
  • Right to Rectification: You have the right to request that we correct inaccurate information or complete incomplete information.
  • Right to Erasure: You have the right to request that we delete your personal data in certain circumstances.
  • Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
  • Right to Data Portability: You have the right to request that we transfer your personal data to another organization or directly to you.
  • Right to Object: You have the right to object to our processing of your personal data in certain circumstances.
  • Right to Withdraw Consent: You have the right to withdraw your consent at any time where we rely on consent to process your personal data.

To exercise any of these rights, please contact us at [Your Privacy Email]. We will respond to your request within one month.

13. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without verification of parental consent, we will take steps to remove that information from our servers.

14. Third-Party Links

Our Service may contain links to third-party websites or services that are not owned or controlled by ProcessFlow. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services.

15. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

16. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:
[email protected]