1. Introduction

BuildFlow respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use, and protect your information.

2. Data We Collect

We collect the following types of data:

• Account data: name, email, phone, address, tax ID
• Usage data: access logs, usage metrics, system events
• Business data: invoices, customers, expenses, support tickets

3. How We Use Data

We use your data to:

• Provide and improve the service
• Process payments and billing
• Communicate with you about the service
• Comply with legal obligations
• Prevent fraud and abuse

4. Data Sharing

We do not sell your data. We may share data only with:

• Service providers (hosting, payments) under confidentiality agreements
• Legal authorities when required by law

5. Security

We implement technical and organizational security measures to protect your data, including encryption, access control, and continuous monitoring.

6. Your Rights (GDPR)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct incorrect data
• Erasure: Request the erasure of your data
• Portability: Export your data in a structured format
• Objection: Object to the processing of your data

You can exercise these rights through the Privacy Settings page.

7. Data Retention

We retain your data while your account is active and for 90 days after account deletion (retention period). After this period, data is permanently deleted.

8. Cookies

We use essential cookies for the operation of the service and analytical cookies to improve the experience. You can manage cookie preferences in your browser settings.

9. Changes to This Policy

We may update this policy occasionally. We will notify you of significant changes and ask for new consent if necessary.

10. Contact

For questions about privacy or to exercise your rights, contact us via support in the portal or by email.