Privacy Policy

Last updated: June 22, 2026

This Privacy Policy explains how Flowify collects, uses, and protects personal data when you visit our website or engage our services. We comply with the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA) as amended by the CPRA.

Who we are

Flowify is operated by Human Experience Design SRL, a Romanian company based in Bucharest. We are the data controller for personal data described in this Policy.

Contact: mike@flowifyresults.com

Data we collect

Information you provide:

Name, business name, email, phone, and billing details when you contact us, sign a proposal, or become a client

Account credentials and access tokens you grant us to manage advertising accounts on your behalf

Content of communications with us, including emails, calls, and messages

Mobile phone number and SMS opt-in consent records when you sign up to receive text messages from us

Information collected automatically:

IP address, device, browser type, referrer, and pages visited on our website

Cookies and similar technologies, as described in Section 8

Information from third parties:

Advertising platform metrics from Meta, Google, and other ad networks where you authorize access

Analytics and conversion data from platforms you connect

We do not knowingly collect data from children under 16.

Why we use it

We process personal data for:

Delivering the services you hired us to perform, including campaign management, reporting, and account access (legal basis under GDPR: contract performance)

Sending invoices, processing payments, and reconciling ad spend (contract performance and legal obligation)

Communicating about your account, our services, and operational updates, including by SMS where you have opted in (contract performance and legitimate interest)

Marketing our services to business prospects, including cold email and newsletters, where permitted by law (legitimate interest, with opt-out always available)

Improving our website and services (legitimate interest)

Complying with tax, accounting, and other legal obligations (legal obligation)

Who we share data with

We share personal data only as needed:

Service providers and processors that help us operate, including hosting, email delivery, CRM, analytics, accounting, and payments

Advertising platforms where we manage your campaigns, including Meta and Google

Professional advisors, including lawyers and accountants

Authorities where required by law

We do not sell personal data. We do not share personal data for cross-context behavioral advertising as defined under California law.

No mobile information, SMS opt-in data, or messaging consent will be shared with third parties or affiliates for marketing or promotional purposes. This information is also excluded from any data sharing with affiliates. The only sharing of this information is with subcontractors that help us deliver the SMS service, such as our messaging platform provider, under contracts that prohibit further use of your data.

International transfers

Some of our service providers are based outside the European Economic Area, including in the United States. Where we transfer personal data internationally, we rely on:

European Commission adequacy decisions where available

Standard Contractual Clauses approved by the European Commission

Other lawful transfer mechanisms

You can request information about the safeguards in place by contacting us.

How long we keep data

We retain personal data for as long as needed to deliver our services, meet legal and tax obligations, and resolve disputes:

Client records: duration of the engagement plus ten years for accounting compliance under Romanian law

Prospect and marketing records: until you opt out, or up to three years from last contact

SMS opt-in records and mobile numbers: until you opt out via STOP, plus a reasonable period to evidence consent and process the opt-out

Website analytics: typically twenty-six months or less

Your rights

If you are in the EU, EEA, UK, or Switzerland, you have the right to:

Access the personal data we hold about you

Correct inaccurate data

Erase your data in certain circumstances

Restrict or object to processing

Data portability

Withdraw consent where processing is based on consent

Lodge a complaint with a supervisory authority, including the Romanian Data Protection Authority (ANSPDCP)

If you are a California resident, you have the right to:

Know what personal information we collect, use, and disclose

Delete personal information we collected from you

Correct inaccurate personal information

Opt out of sale or sharing of personal information (we do not sell or share)

Limit use of sensitive personal information (we do not use sensitive PI beyond what is necessary)

Non-discrimination for exercising your rights

To exercise any right, email us at mike@flowifyresults.com. We will respond within the timeframes required by law, typically thirty days under GDPR and forty-five days under CCPA. We may need to verify your identity before fulfilling a request.

SMS and mobile information

When you provide your mobile number and opt in to receive text messages from Flowify, we collect:

Your mobile phone number

A record of your consent, including the date, time, and method of opt-in

The content of messages exchanged between you and us

Delivery and engagement metadata from our SMS platform provider

We use this information only to send you the messages you opted in to receive, which may include sales follow-ups, appointment and meeting reminders, account and campaign updates, billing notices, and replies to your inquiries.

No mobile information, SMS opt-in data, or messaging consent will be shared with third parties or affiliates for marketing or promotional purposes. We do not sell, rent, or transfer this information to any third party for marketing. The only parties with access to your mobile information are subcontractors that help us deliver the SMS service, such as our messaging platform provider, under contracts that prohibit further use of your data.

Message frequency varies. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages.

You can opt out at any time by replying STOP to any message. For help, reply HELP to any message or email mike@flowifyresults.com. Full SMS terms are available in our Terms of Service.

Cookies

Our website uses cookies and similar technologies for:

Essential functions, such as keeping the site working

Analytics, such as understanding how visitors use the site

Marketing, such as measuring campaign results

You can manage cookie preferences through our cookie banner or your browser settings. Disabling some cookies may affect site functionality.

Security

We use reasonable technical and organizational measures to protect personal data, including access controls, encryption in transit, and vendor due diligence. No system is fully secure, and we cannot guarantee absolute protection.

Changes

We may update this Policy. The "Last updated" date reflects the most recent revision. Material changes will be notified through our website or by email.

Contact

Human Experience Design SRL

Bucharest, Romania

Email: mike@flowifyresults.com

For GDPR matters, you may also contact the Romanian Data Protection Authority (ANSPDCP) at www.dataprotection.ro.