Privacy Policy
Last updated: July 2026
WorkFlow ("we") provides AI automation services for service businesses. This policy explains what we collect and how we use it.
What we collect
- Account information (email, business name) when you sign up or purchase.
- Business brief data you enter in your portal (services, FAQs, hours, etc.).
- Usage data: chat messages, bookings, call/SMS logs for services you enable.
- Payment information processed by Stripe — we do not store card numbers.
How we use data
- Deliver and improve your purchased AI services.
- Send transactional emails (receipts, setup, alerts).
- Provide support and monitor system reliability.
Third parties
We rely on a small set of processors to run the service: Supabase (database and hosting), Stripe (payments), Twilio (SMS/voice when enabled), and Google (Calendar when you connect it). Each processes data under its own privacy policy, and we only share what is required to deliver the feature you enabled.
Data retention & deletion
- Portal data (briefs, bookings, conversations, SMS logs) is retained while your subscription is active so your services keep working.
- If you cancel, you can request deletion of your account data by email; we remove it from production systems within 30 days, except records we must keep for tax or legal reasons (e.g. Stripe invoices).
Security
- All traffic is encrypted in transit (HTTPS/TLS).
- Card details are handled entirely by Stripe and never touch our servers.
- Inbound Twilio webhooks are signature-verified, and internal maintenance endpoints require secret authentication.
Cookies
We use cookies only to keep you signed in to your portal. We do not run third-party advertising trackers.
Your rights
You can request a copy of your data, ask us to correct it, or ask us to delete it at any time by emailing the address below. We respond within 30 days.
Contact
Questions: aiworkflowautomated@gmail.com