cat privacy-policy.md

This policy explains what personal data Flowaivo LLC collects through flowaivo.com and in the course of its work, why it collects it, how long it keeps it, and what rights you can exercise.

1. Data controller

The data controller is Flowaivo LLC, whose details appear above. Any request about your data can be sent to contact@flowaivo.com.

2. What we collect

2.1 What you send us

When you use the contact form or write to us directly, we receive your name, your email address and the content of your message. The form on this site opens your own email app: the message reaches us by email, with nothing stored on the site in between.

2.2 Project data

During a project we may handle business contact details, technical access to your systems, and billing information. When we work inside your own systems we act as a processor: your customers' data stays your responsibility and we use it only to carry out the work.

2.3 Technical data

Our host records connection logs containing the IP address, the date and time of the request and the browser type. These logs exist for security and diagnostics.

3. Purposes and legal bases

• Answering your enquiry — basis: steps taken at your request before a contract.
• Delivering a contract — basis: performance of the contract with you.
• Invoicing and accounting — basis: legal obligation.
• Site security — basis: our legitimate interest in protecting our systems.
• Non-essential cookies, where used — basis: your consent.

4. Cookies

The site uses cookies that are strictly necessary for it to work and to remember your consent choice. A banner lets you accept or refuse non-essential cookies before any are set.

As at the date shown at the top of this page, no analytics tool or advertising pixel is active on this site. If that changes, the consent banner and this policy will be updated accordingly.

You can delete stored cookies at any time from your browser settings.

5. Who else sees your data

Your data is never sold, rented or traded. It may be handled by the technical providers our work strictly requires:

• our hosting provider, to store and serve the site;
• our email provider, for correspondence;
• where relevant, our invoicing or payment provider, for financial transactions.

These providers act only on our instructions and are bound by confidentiality.

6. International transfers

Flowaivo LLC is established in the United States, so data you send us may be processed outside the European Economic Area. Such transfers are covered by the appropriate safeguards required under the GDPR, including the European Commission's standard contractual clauses where they apply, and are limited to what is necessary to deliver the work or answer your enquiry.

7. How long we keep it

• Enquiries that go nowhere — 12 months from the last exchange.
• Client files — for the length of the relationship, then 3 years as evidence.
• Accounting records — for the statutory retention period that applies.
• Technical logs — 12 months at most.
• Access to your systems — revoked when the work ends.

8. Your rights

Under the GDPR and other applicable law you have rights of access, rectification, erasure, restriction, objection and portability, and the right to withdraw consent at any time where processing is based on it.

To exercise them, write to contact@flowaivo.com. We respond within one month. We may ask for proof of identity where there is reasonable doubt.

If you believe your rights are not being respected, you may complain to the supervisory authority in your country of residence.

9. Security

The site is served over HTTPS. Administrative access is limited to people who need it and protected by strong passwords. Access to client systems is named and revoked at the end of the engagement. No system is perfect; if a data breach occurred that was likely to put your rights at risk, we would tell you without undue delay.

10. Children

Our services are aimed at businesses. We do not knowingly collect data about anyone under 16.

11. Changes

This policy may change. Any substantial change will be noted on this page and the date at the top updated.