Privacy Notice

B2B Workflow Solutions ("we", "us", "our") provides AI-assisted workflow tooling for B2B teams. We act as the data controller for personal data we collect about users of our website and platform. For data you upload into the Service about your own customers or contacts, you are the controller and we act as a processor on your behalf.

• Account data: name, email address, company name, role, password (hashed), phone number used as caller ID.
• Profile and preferences: display name, avatar, language, notification settings.
• Usage and telemetry: pages visited, features used, timestamps, error logs.
• Device and connection: IP address, browser type, operating system, device identifiers.
• Customer support: messages, attachments, and metadata from your support requests.
• Communications you process: emails, call transcripts, customer records, invoices, and other content you submit to the Service.

Payment data (card details, billing address) is collected and processed directly by Paddle as the Merchant of Record. We do not store full payment-card details.

• Service providers / sub-processors: hosting (Supabase / cloud infrastructure), email delivery, SMS delivery (Twilio), analytics, error monitoring.
• Paddle.com — our Merchant of Record, which handles checkout, subscription management, payments, tax compliance, invoicing, and customer-service inquiries about orders.
• Professional advisers: legal, accounting, and compliance advisers, where necessary.
• Authorities: where required by law, court order, or to protect our rights.

We do not sell your personal data.

Where personal data is transferred outside the UK / EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, UK International Data Transfer Agreement, or adequacy decisions.

We keep personal data only as long as needed for the purposes set out above. Account data is retained for the life of your account and for a reasonable period after closure to handle legal, tax, accounting, and dispute obligations. Telemetry and logs are retained for a limited period. Content you upload to the Service is kept for as long as you keep your account, after which it is deleted or anonymised.

Depending on where you live, you may have the right to access, rectify, erase, restrict, port, or object to the processing of your personal data, and to withdraw any consent you have given. EU/UK users also have the right to lodge a complaint with their local supervisory authority. We aim to respond to verified requests within one month. To exercise your rights, contact us via the Contact page.

We implement appropriate technical and organisational measures to protect personal data, including encryption in transit, encryption at rest where applicable, role-based access controls, audit logging, and regular review of our security practices.

We use cookies and similar technologies that are strictly necessary to operate the Service (authentication, security, load balancing). With your consent, we may use additional analytics cookies to understand usage and improve the product. You can manage non-essential cookies via your browser settings; disabling strictly necessary cookies may impair the Service.

We may update this Notice from time to time. Material changes will be communicated through the Service or by email. The "Last updated" date at the top of this page reflects the latest revision.

For privacy questions or to exercise your rights, please reach out via our Contact page.