Privacy Policy
Last updated: 24 July 2026
What we collect
Account details (name, email, organization), the content your organization puts in the platform (projects, tasks, documents, comments), and usage records needed to run and secure the service (sign-ins, device and log data). We do not collect card numbers — card payments are handled entirely by our payment partner as merchant of record.
How we use it
To provide the service, keep it secure, bill subscriptions, respond to support requests, and send service notifications (approvals, reminders, invoices). We do not sell personal data, and we do not use your organization's content for advertising.
Who else touches data
Only processors needed to run the service: cloud hosting, email delivery, and the payment partner (for billing details, never your platform content). Each is bound by data-processing agreements.
Your data, your control
Your organization owns its content. Administrators can export data and delete users. If you close your account, content is deleted after the retention window needed for legal and backup purposes.
Security
Encryption in transit, encrypted backups, role-based access inside the platform, and audit logging. Access to production data is restricted to the minimum needed to operate the service.
Your rights
You can ask what personal data we hold about you, correct it, export it, or ask for deletion, subject to legal retention requirements. Email sales@approvedflow.com and we respond within 30 days.
Changes
If this policy changes, account owners are notified by email before the change takes effect.