Privacy Notice

Who we are

Payflow ("we", "us") is the data controller for the personal information collected through this service.

What we collect

• Account data — name, email, profile picture (when you sign in with Google).
• Invoice data — your clients' name and email, descriptions, amounts, currencies.
• Payout data — your chosen payout method and destination details.
• Usage data — IP address, device, browser, pages viewed (for security and product improvement).

Why we collect it

To provide the service (account, invoicing, payouts), prevent fraud, comply with our legal obligations, and improve the product. Legal bases: contract performance, legitimate interests, legal obligation, and consent where required.

Who we share it with

• Paddle.com — our Merchant of Record, handles checkout, payments, tax compliance and invoicing.
• Cloud hosting and analytics providers (subprocessors) under appropriate safeguards.
• Authorities where legally required.

Retention

We keep your data as long as your account is active and for as long as necessary to comply with legal and accounting obligations.

Your rights

You may request access, correction, deletion, restriction, portability, or to object to processing. Contact privacy@payflow.app.

Security

We apply appropriate technical and organisational measures including encryption in transit and at rest and strict access controls.