Privacy Notice

1. Who is responsible for your data

ClientFlow is operated by Jeeda Hallak, who is the data controller for the personal data described in this notice. This means Jeeda Hallak decides why and how your personal data is processed when you use ClientFlow.

2. What we collect and why

• Account data — name, email address, business name and login credentials, used to create and secure your account (legal basis: contract performance).
• Workspace content — clients, projects, tasks, invoices, files and comments you enter, used to provide the service (legal basis: contract performance).
• Support messages — when you contact us, used to respond and help you (legal basis: legitimate interests).
• Usage and device data — IP address, device identifiers and product telemetry, used for security, fraud prevention and product improvement (legal basis: legitimate interests).

Payment-related data (card details, billing address, tax information) is collected and processed by Paddle as Merchant of Record when you make a purchase; we do not store your card details.

3. Who we share data with

• Service providers / subprocessors — hosting, database, analytics and support tooling that help us run ClientFlow;
• Paddle — our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance and invoicing;
• Professional advisers — legal and accounting, where needed;
• Authorities — where required by law.

Where personal data is transferred outside the UK/EEA, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

4. Retention

We keep your personal data for as long as your account is active and as needed to provide the service, meet legal obligations and resolve disputes. When data is no longer needed, it is deleted or anonymised.

5. Your rights

Depending on your location, you may have the right to access, rectify or erase your personal data, to restrict or object to processing, to data portability, and to withdraw consent at any time. You also have the right to complain to your supervisory authority. We respond to requests within one month. To exercise any of these rights, contact us via the support option in the app.

6. Security

We apply appropriate technical and organisational measures to protect your data, including encryption in transit, access controls and row-level isolation of each account's data.

7. Cookies

ClientFlow uses essential cookies and local storage to keep you signed in and run the app. If analytics or marketing cookies are introduced, you will be able to manage your preferences. You can clear cookies at any time through your browser settings.

8. Changes

We may update this notice from time to time. Material changes will be highlighted in the app or by email. Questions about this notice: contact Jeeda Hallak via the support option in the app.