Privacy Policy

Last updated: November 9, 2025

1. Introduction

FlowSOP ("we", "our" or "us") is committed to protecting the privacy and security of our users' personal information. This Privacy Policy explains how we collect, use, disclose and protect your information when you use our FlowSOP platform.

2. Information We Collect

2.1 Information You Provide

  • Account information: name, email address, phone number, company
  • Payment information: processed securely by Stripe (we do not store card data)
  • Mission content: descriptions, photos, comments, signatures

2.2 Automatically Collected Information

  • Technical data: IP address, browser type, operating system
  • Usage data: pages viewed, actions performed, session duration
  • Cookies: see our Cookie Policy

3. How We Use Your Information

  • Provide, maintain and improve our services
  • Process payments and manage your subscription
  • Communicate with you (support, updates, notifications)
  • Ensure security and prevent fraud
  • Analyze usage to improve user experience
  • Comply with our legal obligations

4. Sharing Your Information

We never sell your personal information. We may share your data with:

  • Service providers: Stripe (payments), Supabase (hosting), Resend (emails)
  • Legal authorities: if required by law or to protect our rights
  • Business transfer: in case of merger, acquisition or asset sale

5. Data Security

We implement appropriate security measures to protect your information:

  • SSL/TLS encryption for all communications
  • Secure authentication with OTP
  • Secure hosting with Supabase
  • Regular backups
  • Strict access controls

6. Your Rights (GDPR & Quebec Law 25)

You have the right to:

  • Access your personal information
  • Rectify inaccurate information
  • Delete your account and data
  • Export your data (portability)
  • Limit the processing of your data
  • Object to the processing of your data
  • Withdraw your consent at any time

7. Data Retention

We retain your information as long as necessary to provide our services and comply with legal obligations:

  • Account data: until account deletion + 30 days
  • Mission data: according to your archiving settings (default: 10 years for compliance)
  • Payment data: 7 years (legal tax obligation)

8. International Transfers

Your data may be transferred and stored in countries outside Canada/EU. We ensure appropriate safeguards are in place (e.g., standard contractual clauses).

9. Cookies and Similar Technologies

We use cookies to improve your experience. See our

10. Changes to This Policy

We may update this Privacy Policy. We will notify you of significant changes by email or via a notice on our platform.

11. Contact

For any questions about this policy or your personal data:

support@flowsop.com