1. Who We Are
FlowTailor produces custom automation workflow packages delivered as digital files, operating from Israel.
Data controller contact: [email protected]
2. What Data We Collect
- - Contact form submissions: name, email, business description, automation needs
- - Payment data: processed entirely by our payment processor (Merchant of Record). FlowTailor does not store or process payment card data
- - Website analytics: Cloudflare analytics (IP address, page visits, browser type) - no cookies required
- - Email communications: email address and message content for project delivery
3. Why We Collect It (Legal Basis)
- - Contract performance: to deliver ordered workflow packages and provide agreed support
- - Legitimate interest: to respond to inquiries, improve our products, and understand usage patterns
- - Consent: for email marketing communications (explicit opt-in required, easy unsubscribe)
4. Who We Share Data With
We use the following third-party services to operate our business:
- - Payment processor - payment processing as Merchant of Record (currently Gumroad; subject to change)
- - Cloudflare (cloudflare.com) - website hosting and security
- - Google (google.com/gmail) - email communication
We do not sell, rent, or trade your personal data to third parties.
5. Data Retention
| Data Type | Retention Period |
|---|---|
| Active customer data | Duration of business relationship plus 2 years |
| Inactive inquiries | Deleted after 2 years of no contact |
| Email marketing list | Until you unsubscribe, plus 30 days for processing |
| Project files | Retained for 1 year after delivery for support purposes |
6. Your Rights (EU/EEA Users)
Under GDPR, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Object to processing based on legitimate interest
- Withdraw consent for marketing at any time
- Data portability
How to exercise your rights: Email [email protected] with your request. We will respond within 30 days.
7. International Transfers
Data may be processed in Israel, which has an EU adequacy decision. This means the European Commission has recognized Israel as providing adequate protection for personal data.
Third-party processors (payment processor, Cloudflare) may process data in other jurisdictions under their own privacy frameworks.
8. Cookies
This website uses only essential Cloudflare security cookies. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
No cookie consent banner is needed as we only use strictly necessary cookies.
9. Changes to This Policy
We may update this policy to reflect changes in our practices or legal requirements. Material changes will be posted on this page with an updated "last modified" date.
Continued use of our website after changes constitutes acceptance of the revised policy.
Questions about this policy? Contact us at [email protected].