BobFlow Privacy Policy

Last Updated: May 7, 2026

This Privacy Policy explains how BobFlow collects, uses, shares, and protects personal information when you access or use our Service.

1. Introduction

This Privacy Policy describes how BobFlow collects, uses, stores, discloses, and protects personal information in connection with our websites, web application, software, features, content, functionality, and related services (collectively, the “Service”).

The Service is operated by bobflow.com (“BobFlow,” “we,” “us,” or “our”).

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, you should not access or use the Service.

Capitalized terms not defined in this Privacy Policy have the meanings given to them in our Terms of Service.

2. Scope of This Privacy Policy

This Privacy Policy applies to information we collect:

When you access or use the Service;
When you create or use an account;
When you submit, upload, or store information through the Service;
When you communicate with us by email, support forms, chat, or other channels;
When you visit our website or interact with our online content; and
When you purchase, manage, or use a subscription.

This Privacy Policy does not apply to third-party websites, applications, services, or integrations that we do not own or control, even if they link to or are accessible from the Service.

3. Our Role in Processing Data

BobFlow may process different types of information in different roles.

Customer Data

“Customer Data” means data, records, files, attachments, text, notes, materials, and other content submitted, uploaded, stored, transmitted, or otherwise made available through the Service by you or users of your account.

For Customer Data, we generally process the information on behalf of the account owner or customer that controls the account. If you have questions or requests about Customer Data stored in an account that you do not own or administer, you should contact the account owner or administrator directly.

Account, User, Website, and Business Data

For information we collect about account owners, users, website visitors, prospects, billing contacts, and people who communicate with us directly, we generally determine how and why that information is processed as described in this Privacy Policy.

4. Information We Collect

We may collect the following categories of information:

Category	Examples
Account and profile information	Name, email address, login credentials, profile information, account role, organization or business name, and account settings.
Subscription and billing information	Plan information, seat or user count, billing contact details, payment status, invoices, subscription history, and payment-related records. Payment card details may be processed by our payment processor and may not be stored directly by us.
Customer Data	Information, records, files, attachments, notes, and other materials that users submit, upload, store, or process through the Service.
Usage and device information	IP address, browser type, device type, operating system, pages or features used, referring URLs, timestamps, log data, diagnostic data, and general location information derived from IP address.
Communications	Messages, support requests, feedback, survey responses, emails, and other communications you send to us.
Cookies and similar technologies	Cookie identifiers, analytics data, session information, preferences, and similar tracking or storage technologies.
Information from third parties	Information from payment processors, authentication providers, analytics providers, integrations, referral sources, or other third-party services you choose to use with the Service.

5. How We Collect Information

We collect information in several ways:

Directly from you when you create an account, use the Service, upload information, purchase a subscription, contact us, or submit forms.
Automatically when you use the Service, including through logs, cookies, analytics tools, and similar technologies.
From other users when an account owner or administrator invites you to an account or provides information about you.
From third-party services when you connect integrations, use payment processors, authenticate through third-party tools, or otherwise interact with third-party services connected to BobFlow.

6. How We Use Information

We may use information for the following purposes:

To provide, operate, maintain, and improve the Service;
To create, manage, authenticate, and secure accounts;
To process subscriptions, payments, invoices, and billing matters;
To provide customer support and respond to requests;
To store, process, and display Customer Data as directed by users and account owners;
To monitor, prevent, detect, and address fraud, abuse, security incidents, and technical issues;
To personalize and improve user experience;
To analyze usage, performance, and product functionality;
To send service-related notices, updates, security alerts, administrative messages, and support communications;
To send marketing or promotional communications where permitted by law and your preferences;
To enforce our Terms of Service and other policies;
To comply with legal obligations, lawful requests, and applicable laws; and
To protect the rights, safety, and property of BobFlow, users, customers, and third parties.

7. How We Share Information

We may share information in the following circumstances:

With service providers. We may share information with vendors and service providers that help us operate the Service, such as hosting providers, payment processors, analytics providers, email providers, storage providers, security providers, and support tools.
Within your account. Information and Customer Data may be visible to account owners, administrators, authorized users, or other users based on account settings and permissions.
With third-party integrations. If you enable or use integrations or third-party services, information may be shared with or accessed by those services according to your settings, permissions, and the third party’s terms and privacy policy.
For legal and safety reasons. We may disclose information if we believe disclosure is necessary to comply with law, legal process, governmental requests, enforce our agreements, investigate security or fraud issues, or protect rights, safety, and property.
In a business transaction. We may disclose or transfer information in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar business transaction.
With your consent or direction. We may share information when you instruct us to do so or otherwise provide consent.

We do not sell Customer Data. We do not use Customer Data for third-party advertising.

8. Cookies and Similar Technologies

We may use cookies, pixels, local storage, analytics tools, and similar technologies to operate the Service, remember preferences, understand usage, improve performance, support security, and analyze traffic.

You may be able to control cookies through your browser settings. If you disable cookies, some parts of the Service may not function properly.

We may use third-party analytics tools to help us understand how users interact with the Service. These tools may collect information such as IP address, device information, browser information, pages visited, and actions taken within the Service.

9. Communications

We may send you service-related communications, including account notices, billing notices, security alerts, product updates, support messages, and changes to our terms or policies. These communications are part of the Service and you may not be able to opt out of them while using the Service.

We may also send marketing or promotional communications where permitted by law. You may opt out of marketing emails by following the unsubscribe instructions in those emails or by contacting us. Even if you opt out of marketing communications, we may still send service-related communications.

10. Data Retention

We retain information for as long as reasonably necessary to provide the Service, operate our business, comply with legal obligations, resolve disputes, enforce agreements, maintain security, prevent fraud, and fulfill the purposes described in this Privacy Policy.

Customer Data may be retained while the relevant account remains active and for a reasonable period after cancellation, termination, or deletion, subject to technical limitations, backup retention, legal obligations, dispute resolution, security needs, and legitimate business purposes.

We may retain aggregated, anonymized, or de-identified information that does not reasonably identify an individual.

11. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security of the Service or any information processed through it.

You are responsible for maintaining the confidentiality of your login credentials, using strong passwords, managing user access, and promptly notifying us of any suspected unauthorized access or security issue.

12. Sensitive Information

Unless we separately agree in writing, the Service is not intended for protected health information subject to HIPAA, and we do not agree to act as a HIPAA Business Associate through this Privacy Policy or our Terms of Service.

Unless we expressly agree in writing, you should not upload protected health information subject to HIPAA, full payment card numbers, Social Security numbers, government identification numbers, genetic information, biometric data, financial account credentials, passwords, or other highly sensitive information that requires special legal or regulatory treatment.

13. International Data Transfers

We may process and store information in the United States and other locations where we or our service providers operate. If you access the Service from outside the United States, your information may be transferred to, stored in, or processed in the United States or other jurisdictions that may have different data protection laws than your jurisdiction.

14. Your Privacy Rights and Choices

Depending on where you live and the nature of your relationship with us, you may have certain rights regarding your personal information, such as the right to request access, correction, deletion, portability, restriction, objection, or to opt out of certain processing.

To make a privacy request, contact us using the information below. We may need to verify your identity or authority before responding to a request.

If your request relates to Customer Data in an account controlled by another person or organization, we may direct you to the account owner or administrator. Account owners and administrators are generally responsible for handling requests relating to Customer Data they control.

15. U.S. State Privacy Notices

Certain U.S. state privacy laws may provide residents with additional rights regarding personal information. These rights may include the right to know or access personal information, correct inaccurate information, delete information, obtain a copy of information, and opt out of certain uses or disclosures.

We do not sell Customer Data. We do not use Customer Data for third-party advertising. If our practices change, we will update this Privacy Policy as appropriate.

To exercise applicable privacy rights, contact us using the information below.

16. Children’s Privacy

The Service is not intended for children under 13 years of age, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take reasonable steps to delete that information.

17. Third-Party Links and Services

The Service may contain links to third-party websites, applications, integrations, or services. We are not responsible for the privacy practices, security, content, or policies of third parties. Your use of third-party services is subject to those third parties’ terms and privacy policies.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make changes, we will update the “Last Updated” date above. We may also provide additional notice where required by law or where we determine the changes are material.

Your continued use of the Service after an updated Privacy Policy becomes effective means you acknowledge the updated Privacy Policy.

19. Contact Information

Questions, requests, or concerns about this Privacy Policy or our privacy practices should be directed to:

BobFlow
Email:Click to reveal