Privacy Policy

Last updated: July 17, 2026

This policy explains what FlowPay ("we") collects, why, and what we do with it, across takeflowpay.com (the marketing site) and app.takeflowpay.com (the product).

What we collect

• Account data — name, email, practice details, and the information needed to create your Stripe connected account. Authentication is handled by Auth0; we do not store your password.
• Payer data you enter — names and email addresses of the parties you invoice, invoice amounts and shares, and per-payer payment status.
• Payment data— processed by Stripe on Stripe's systems. Card numbers never touch FlowPay: every payment link is Stripe-hosted checkout. We receive payment metadata (amounts, status, last-4 style references) from Stripe.
• Usage data — standard logs and, on the marketing site, privacy-respecting product analytics (PostHog) to understand what pages are used.

What we use it for

To operate the Service: sending payment links, receipts, follow-ups on unpaid balances, and account emails; to secure and debug the Service; and to understand aggregate usage. We do not sell personal information, and we do not use payer data for marketing. Payers receive only emails about the invoice they are party to.

Who processes it for us

Our subprocessors: Stripe (payment processing and KYC), Amazon Web Services (hosting and email delivery, US regions, us-east-2 primary), Auth0/Okta (authentication), and PostHog (analytics). Each processes data only to provide its service to us.

Retention and deletion

We keep account and invoice records while your account is active and as required for legal, tax, and dispute-handling purposes. You can request deletion of your account data at hello@takeflowpay.com; we will delete what we are not legally required to retain. Payment records held by Stripe remain in your own Stripe account and under Stripe's policies.

Security

Data is encrypted in transit and at rest. Card data is handled exclusively by Stripe's PCI-compliant infrastructure. See our security page for details, and report vulnerabilities to security@takeflowpay.com.

Your rights

Depending on where you live you may have rights to access, correct, delete, or export your personal information, and to object to certain processing. Write to hello@takeflowpay.com and we will honor applicable rights within the legally required time. If you are a payer on an invoice, we may direct part of your request to the professional who invoiced you, since they control that relationship.

Changes and contact

We will announce material changes to this policy by email or in the Service before they take effect. Questions: hello@takeflowpay.com. For processing on behalf of practices subject to data-protection agreements, see our Data Processing Addendum.