Privacy Policy

1. Information we collect

Account information. Your name, email address and business details, collected through our sign-in provider (Clerk) when you create an account.

Contact information you add or collect. Names, email addresses, phone numbers, appointment, quote and service history for your own customers, which you enter, import, or which arrive through a lead form on your website. For this information, you are responsible for the relationship with your contacts and we process it on your behalf to run the automations you configure.

Billing information. Subscription and payment details are handled by Stripe. We never see or store full card numbers.

Technical information. Basic logs such as IP address, browser type and pages visited, used for security and to diagnose faults.

2. How we use it

• To operate the CRM, automation workflows, appointment scheduling and review-request features you configure.
• To send email and SMS to your contacts on your behalf (via Resend and, where enabled, Twilio).
• To provide the optional Google/Apple Calendar feed and the website SEO reports you request.
• To process subscription billing.
• To detect and fix technical errors, and to keep the platform secure.

We don’t sell personal information, and we don’t use your contacts’ information for our own marketing.

3. Who we share it with, and where it goes

We share information only with the providers that make ConnectFlow work: Clerk (sign-in), Stripe (billing), Resend (email delivery), Twilio (SMS, only if enabled), Inngest (workflow processing), Neon (database), Vercel (hosting) and Google (the PageSpeed Insights API, only when you run a website SEO check). Our database and application servers are located in Sydney, Australia. Some of the providers above are based overseas, mainly in the United States, so information may be processed outside Australia. We take reasonable steps to ensure these providers handle it in line with the Australian Privacy Principles.

4. Messaging and consent

If you use ConnectFlow to send SMS or email, you are responsible for having your contacts’ consent and for complying with the Spam Act 2003 (Cth) and the Do Not Call Register Act 2006 (Cth), including honouring opt-outs. ConnectFlow provides opt-out tools, but compliance for your messages remains yours.

5. How long we keep it

We keep your account and contact information while your subscription is active, and for a reasonable period afterwards in case you return, unless you ask us to delete it sooner.

6. Security and data breaches

We use encrypted connections, access controls and rate limiting to protect the information we hold, but no system is completely secure. If a breach is likely to cause serious harm, we will notify affected accounts and the Office of the Australian Information Commissioner as required under the Notifiable Data Breaches scheme.

7. Access, correction and complaints

You can ask to see, correct or delete the personal information we hold about you by emailing gabe@connectflow.company. If you’re one of a business’s contacts, please contact that business first, as they control your information. If you’re not satisfied with how we handle a request or complaint, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

8. Changes to this policy

We’ll update the date at the top of this page when this policy changes, and let account holders know of material changes by email.

9. Contact

Gabe Farrell, ConnectFlow, New South Wales, Australia. Email: gabe@connectflow.company.