This privacy policy applies to those who visit subscriptionflow.com as well as customers, excluding end-users of our billing and subscription platform, tools, and services that are owned and operated by SubscriptionFlow Inc. (“We”, “Us” or “Our”). Thank you for choosing to be part of our community. We are committed to protecting your personal information and your right to privacy.

If you have any questions or concerns about this privacy notice or our practices with regards to your personal information, please contact us at [email protected]. This privacy policy describes how SubscriptionFlow collects, uses, and shares the personal information you provide to us. It also describes the choices available to you regarding the use of, your access to, and how to update and correct your personal information. The use of information collected through our products and services shall be limited to the purpose of providing the products and services for which our customer has contracted with SubscriptionFlow.

If there are any questions regarding this privacy policy, the practices of this website, or your dealings with this website or in relation to any privacy or data protection issues through the above email address [email protected].

Please read this privacy notice carefully as it will help you understand what we do with the information that we collect. Consent By using our website, you hereby consent to our Privacy Policy and agree to its terms.
For our Terms and Conditions, please visit the  Terms of Service Key Terms of Our Privacy Policy

WHAT INFORMATION DO WE COLLECT?

Personal Information Provided by You We collect personal information that you voluntarily provide to us when you register on the Website, express an interest in obtaining information about us or our products and Services when you participate in activities on the Website or otherwise when you contact us. The personal information that we collect depends on the context of your interactions with us and the Website, the choices you make, and the products and features you use. The personal information we collect may include the following:

Account Information

We collect names; phone numbers; email addresses; mailing addresses; job titles; usernames; passwords; contact preferences; and contact details.

Billing Information

We collect billing addresses; debit/credit card numbers; account number; account passwords; and other similar information.

Credit Card Information

We collect credit card information such as First Name, Last Name, full PAN, and Card Address.
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information Automatically Collected

WHY DO WE COLLECT THE INFORMATION?

In most cases, we collect your information based on your intention to avail of a particular service from us or to make a payment transaction using our platform. We process your information with your consent or with the need to perform a contract that we may have with you.

Therefore, our processing in many cases occurs based on your consent or the need to perform a contract that we may have with you (also on behalf of your end-users). However, in addition to the collection based on consent, there are other bases on which we may collect or process your information. These are as follows:

DO WE USE COOKIES?

The information we collect includes:

Log and Usage Data

Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Website and which we record in log files.

Device Data

We collect device data such as information about your computer, phone, tablet, or another device you use to access the Website.

Location Data

We collect location data such as information about your device’s location, which can be either precise or imprecise. How much information we collect depends on the type and settings of the device you use to access the Website.

DO WE SHARE YOUR INFORMATION?

We do not sell, trade, or otherwise transfer to outside parties your personal information. We will share your personal information with third parties only in the ways that are described in this privacy policy. However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.

Service Providers

We may provide your personal information to third-party services providers companies that provide services to help us with our business activities such as offering customer service or processing your payment. These companies are authorized to use your personal information only as necessary to provide these services to us.

Legal Obligations

We may also disclose your personal information as required by law, such as to comply with a subpoena or similar legal process when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request. If SubscriptionFlow is involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified via email and/or a prominent notice on our website, of any change in ownership, uses of your personal information, and choices you may have regarding your personal information. We may also disclose your personal information to any other third party with your prior consent.

HOW LONG DO WE KEEP YOUR INFORMATION?

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us to keep your personal information for longer than the period of time in which users have an account with us.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

You can ask for the deletion of your personal information. If you ask us to delete your personal information, we will respect your request and delete your personal information, subject to certain exceptions provided by law, such as (but not limited to) the exercise by another consumer of his or her right to free speech, our compliance requirements resulting from a legal obligation or any processing that may be required to protect against illegal activities.

WHAT ARE YOUR PRIVACY RIGHTS?

Some regions (like the European Economic Area), you have certain rights under applicable data protection laws.

These may include the right;

(i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; and (iv) if applicable, to data portability. In certain circumstances, you may also have the right to object to the processing of your personal information. To make such a request, please use the contact details provided below. We will consider and act upon any request in accordance with applicable data protection laws.

If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. Please note however that this will not affect the lawfulness of the processing before its withdrawal, nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

If you are a resident in the European Economic Area and you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority. You can find their contact details here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.

If you are a resident in Switzerland, the contact details for the data protection authorities are available here: https://www.edoeb.admin.ch/edoeb/en/home.html.

If you are a resident of California, you are guarded by the California Code of Regulations.

If you have questions or comments about your privacy rights, you may email us at [email protected].

DO WE MAKE UPDATES TO THIS NOTICE?

We may update this privacy notice from time to time. The updated version will be indicated by an updated “Revised” date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may email us at [email protected].

SubscriptionFlow POPIA Updated Policy

At SubscriptionFlow, we are committed to protecting the privacy and integrity of the personal information of our clients, partners, and website visitors. In compliance with the Protection of Personal Information Act (POPIA), this policy outlines how we collect, use, store, and secure your personal information. Our approach reflects the outcomes of our recent Self-Assessment for POPIA compliance.

GDPR Updated Privacy Policy

At SubscriptionFlow, we value your privacy and are committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR). This Privacy Policy explains how we collect, process, and store your information when you use our subscription management platform.

SubscriptionFlow POPIA Updated Policy

SubscriptionFlow POPIA Updated Policy
Effective Date: [Insert Date]

1. Introduction

At SubscriptionFlow, we are committed to protecting the privacy and integrity of the personal information of our clients, partners, and website visitors. In compliance with the Protection of Personal Information Act (POPIA), this policy outlines how we collect, use, store, and secure your personal information. Our approach reflects the outcomes of our recent Self-Assessment for POPIA compliance.

2. Definitions

  • Personal Information: Any information relating to an identifiable individual.
  • Data Subject: An individual whose personal information is collected, processed, or stored.
  • Processing: Any operation or set of operations performed on personal information, including collection, storage, alteration, dissemination, and destruction.
  • Controller: The entity that determines the purposes and means of processing personal information.
  • Processor: Any entity that processes personal information on behalf of the controller.

3. Scope

This policy applies to all personal information collected through our website (https://subscriptionflow.com/), applications, and any other interactions with SubscriptionFlow services. It covers all processing activities conducted by SubscriptionFlow as well as by third-party service providers on our behalf.

4. Collection and Use of Personal Information

We collect and process personal information for the following purposes:

  • Account Management: To manage user registrations, authenticate logins, and provide customer support.
  • Service Delivery: To facilitate the use of our SaaS platform and to customize the user experience.
  • Compliance: To ensure compliance with legal obligations, including POPIA and other applicable regulations.
  • Communication: To send service-related updates, notifications, and, with consent, marketing communications.
  • Improvement and Analytics: To analyze usage and improve our services.

5. Legal Basis for Processing

Our processing of personal information is based on:

  • Consent: When you have provided explicit consent.
  • Contractual Necessity: To perform contractual obligations and deliver the services you have signed up for.
  • Legal Obligation: When required by law.
  • Legitimate Interest: For purposes related to our business interests, provided these do not override your rights.

6. Data Subject Rights

In accordance with POPIA, you have the right to:

  • Access: Request details about the personal information we hold about you.
  • Correction: Request corrections to any inaccurate or incomplete information.
  • Deletion: Request deletion of your personal information where applicable.
  • Objection: Object to the processing of your personal information under certain circumstances.
  • Restriction: Request that the processing of your personal information be restricted.
  • Data Portability: Request a copy of your personal information in a commonly used format.
  • Withdraw Consent: Withdraw any consent given for the processing of your personal information at any time.

To exercise your rights, please contact our Data Protection Officer (DPO) using the details provided in Section 8 below.

7. Data Security

We employ a range of technical and organizational measures to protect personal information against unauthorized access, loss, or damage. These include:

  • Encryption and secure transmission of data.
  • Regular security assessments and monitoring.
  • Access controls and authentication measures.
  • Staff training on data protection and privacy.

8. Data Protection Officer (DPO) and Contact Information

For any questions regarding this policy or to exercise your data subject rights, please contact our Data Protection Officer:

  • Name: [DPO Name or Designated Contact]
  • Email: [DPO Email Address]
  • Postal Address: [Company Address]
  • Telephone: [Contact Number]

9. Third-Party Processors

We may share personal information with trusted third-party processors who provide services on our behalf. All third parties are required to adhere to strict data protection obligations and comply with POPIA.

10. Data Transfers

Where necessary, personal information may be transferred to third countries or international organizations. In such cases, SubscriptionFlow will take appropriate measures to ensure that the level of protection afforded to your personal information is not undermined.

11. Data Retention

We will retain personal information for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specific retention periods may vary depending on the type of data and legal obligations.

12. Data Breach Notification

In the unlikely event of a data breach, SubscriptionFlow will:

  • Promptly assess the breach and take steps to mitigate its effects.
  • Notify affected data subjects and the relevant supervisory authority in accordance with POPIA requirements.
  • Provide updates and guidance on any necessary remedial actions.

13. Changes to This Policy

SubscriptionFlow may update this policy periodically to reflect changes in our practices or legal requirements. Any material changes will be communicated to you in a timely manner, and the updated policy will be posted on our website with a new effective date.

14. Your Acceptance of This Policy

By using our website and services, you acknowledge that you have read, understood, and agree to the terms outlined in this POPIA Updated Policy.

GDPR Updated Privacy Policy

1. Introduction

At SubscriptionFlow, we value your privacy and are committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR). This Privacy Policy explains how we collect, process, and store your information when you use our subscription management platform.

2. Data Controller and Contact Information
  • Data Controller: SubscriptionFlow Inc.
  • Address: 165 Broadway, 23rd Floor, New York, NY 10006
  • Email: [email protected]
  • Data Protection Officer: [DPO Contact Information, if applicable]

3. Data We Collect

We may collect the following types of data:

  • Personal Identification Data: Name, email address, contact number, and account credentials.
  • Billing and Payment Data: Payment information required to process subscriptions.
  • Usage Data: Log files, IP addresses, browser details, and cookies for service optimization.
  • Support and Communication Data: Information provided when contacting customer support.

4. Legal Basis for Processing

We process your data under the following legal bases:

  • Consent: For marketing communications and optional data sharing.
  • Contractual Necessity: To manage your subscription and provide our services.
  • Legal Obligation: To comply with tax, financial, and regulatory requirements.
  • Legitimate Interests: For service improvement, security, and fraud prevention.

5. How We Use Your Data

Your data is used to:

  • Provide and manage your subscription services.
  • Process payments and handle billing queries.
  • Enhance our platform through usage analytics and feedback.
  • Send you updates, newsletters, and promotional materials (only if you have given explicit consent).
  • Comply with legal obligations and protect against fraud.

6. Data Sharing and International Transfers

  • Third-Party Providers: We may share your data with trusted partners (e.g., payment processors, analytics services, and cloud hosting providers) under strict data processing agreements.
  • International Transfers: If your data is transferred outside the EU, we ensure that appropriate safeguards (such as Standard Contractual Clauses) are in place.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Policy or as required by law. Once your account is closed or upon your request, we will securely delete your data following our data retention procedures.

8. Your Rights Under GDPR

Under the GDPR, you have the right to:

  • Access: Request a copy of your personal data.
  • Rectification: Request corrections to any inaccurate data.
  • Erasure: Ask for your data to be deleted, subject to certain conditions.
  • Restriction: Request a restriction on the processing of your data.
  • Data Portability: Receive your data in a structured, commonly used format.
  • Objection: Object to the processing of your data for direct marketing or other purposes.
  • Withdraw Consent: Revoke consent at any time, where processing is based on your consent.

To exercise any of these rights, please contact our Data Protection Officer at the email provided above.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience on our site. You can manage your cookie preferences via your browser settings. For more details, please refer to our Cookie Policy.

10. Data Security

We implement robust security measures—including encryption, access controls, and regular audits—to protect your data. Despite our best efforts, no method of transmission or storage is completely secure.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any significant changes will be communicated via email and posted on our website, with the updated version taking effect immediately upon posting.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

  • Email: [email protected]
  • Contact Page: [Link to Contact Page]