Privacy Policy

Create Flow, Inc.
Effective Date: November 1, 2025

Create Flow, Inc. ("Create Flow," "Company," "we," "us," or "our") provides web-based software services to enterprise customers. This Privacy Policy describes how we collect, use, process, store, and disclose information in connection with our services (the "Services"). If you have questions about this Privacy Policy, please contact us at: contact@create-flow.ai

1. Scope

This Privacy Policy applies to:

Enterprise customers of Create Flow
Authorized users of customer accounts
Visitors to our website
Individuals whose information is processed through our Services

This policy does not apply to third-party services that may integrate with or connect to our Services.

2. Information We Collect

We may collect and process the following categories of information:

A. Information Provided Directly

Account registration details (name, email address, company name)
Billing and payment information
Communications with us
Information uploaded or submitted through the Services

B. Automatically Collected Information

Log data (IP address, browser type, device information)
Usage data (features accessed, session duration)
Cookies and similar tracking technologies

C. Customer Data

Enterprise customers may upload, transmit, or otherwise provide data to be processed by our Services ("Customer Data"). We process Customer Data solely on behalf of the customer and in accordance with applicable agreements.

3. How We Use Information

We use information to:

Provide, operate, and maintain the Services
Authenticate users and manage accounts
Improve functionality and performance
Provide customer support
Comply with legal obligations
Enforce contractual rights

We do not sell personal information.

4. Data Processing and Third-Party Services

We may use third-party service providers to support our operations, including but not limited to:

Cloud hosting providers
Infrastructure and data storage providers
Analytics services
Payment processors
Security and monitoring providers

These third parties may process information on our behalf. While we select vendors based on reasonable security and reliability standards, third-party providers operate independently and may be subject to their own privacy and security practices. Information processed by third-party providers may be subject to risks inherent in digital transmission, storage, and processing, including unauthorized access, data breaches, or system failures.

5. Data Security

Create Flow implements commercially reasonable technical and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage system is completely secure. While we make best efforts to protect information using reasonable security measures, we cannot guarantee absolute security.

To the maximum extent permitted by applicable law:

Create Flow does not guarantee that data will be free from unauthorized access, loss, or breach.
Create Flow shall not be liable for security breaches, data leaks, or unauthorized access that occur despite reasonable safeguards, including incidents affecting third-party service providers.

6. Data Retention

We retain information:

As long as necessary to provide the Services
As required by contractual obligations
As necessary to comply with legal requirements
As needed to resolve disputes and enforce agreements

Customer Data may be deleted upon termination of the applicable agreement, subject to backup retention policies and legal obligations.

7. International Data Transfers

Information may be processed and stored in jurisdictions outside of your location. By using our Services, you acknowledge that data may be transferred across borders and processed in countries with different data protection laws.

8. Confidentiality (Enterprise Customers)

We treat Customer Data as confidential and process it solely for the purpose of providing the Services, subject to the applicable Master Services Agreement or enterprise contract.

9. Your Rights

Depending on applicable law, individuals may have rights to:

Access their personal information
Request correction or deletion
Restrict or object to processing
Request data portability

Requests may be submitted to: contact@create-flow.ai

10. Incident Response

In the event of a confirmed security incident affecting Customer Data, we will notify impacted customers in accordance with contractual obligations and applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on our website with an updated effective date.

12. Contact Information

Create Flow, Inc. | Email: contact@create-flow.ai