Privacy Policy
Last updated: January 19, 2026
Haipe Flow ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
1. Information We Collect
1.1 Information You Provide
When you register for and use our Service, we collect:
- Account Information: Name, email address, password
- Business Information: Business name, Google Business Profile details
- Payment Information: Billing address, payment method details (processed securely through our payment processor)
- Customer Data: Phone numbers of your customers to whom you send SMS messages
- Message Content: SMS message templates and content you create
1.2 Automatically Collected Information
- Device Information: IP address, browser type, operating system
- Usage Data: Pages visited, features used, time spent on Service
- Log Data: Server logs, error reports, performance data
- Cookies: Session cookies, authentication tokens, preferences
1.3 Third-Party Data
When you connect your Google account, we receive:
- Basic profile information (name, email, profile picture)
- Google Business Profile information (if authorized)
2. How We Use Your Information
We use the collected information for:
- Service Delivery: To provide, maintain, and improve our SMS review request service
- SMS Processing: To send review request messages to your customers via Twilio
- Account Management: To create and manage your account, process payments, and provide customer support
- Communication: To send service notifications, updates, security alerts, and marketing communications (with your consent)
- Analytics: To understand how users interact with our Service and improve functionality
- Security: To detect fraud, prevent abuse, and protect user safety
- Legal Compliance: To comply with legal obligations and enforce our Terms of Service
3. SMS-Specific Privacy Practices
3.1 Customer Phone Numbers: We process customer phone numbers solely for the purpose of sending review request SMS messages on your behalf. We do not use these numbers for any other purpose.
3.2 Message Content: We store your SMS templates and sent message history to provide message tracking and reporting features.
3.3 Third-Party SMS Service: We use Twilio to deliver SMS messages. Twilio's Privacy Policy applies to SMS transmission: https://www.twilio.com/en-us/legal/privacy
3.4 Consent Responsibility: You are responsible for obtaining proper consent from recipients before sending SMS messages. We do not verify recipient consent.
4. Information Sharing and Disclosure
We share your information only in the following circumstances:
4.1 Service Providers
- Twilio: SMS delivery service
- Payment Processors: Secure payment processing
- Cloud Hosting: Data storage and infrastructure
- Analytics Providers: Service improvement and analytics
4.2 Legal Requirements
We may disclose your information if required by law, court order, or governmental request, or to:
- Comply with legal obligations
- Protect our rights, property, or safety
- Prevent fraud or illegal activities
- Respond to emergency situations
4.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change.
4.4 With Your Consent
We may share your information with other parties when you give us explicit consent to do so.
5. Data Security
We implement industry-standard security measures to protect your information:
- Encryption: Data in transit is encrypted using SSL/TLS protocols
- Access Controls: Restricted access to personal data on a need-to-know basis
- Secure Storage: Data stored in secure, encrypted databases
- Regular Audits: Periodic security assessments and updates
- Authentication: Secure login with password protection
However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
6. Data Retention
We retain your information for as long as necessary to:
- Provide our Service to you
- Comply with legal obligations
- Resolve disputes and enforce agreements
- Maintain business records
SMS Data: Sent message history is retained for reporting purposes. You can request deletion of this data at any time.
Account Data: Upon account deletion, we will delete or anonymize your personal data within 90 days, except where retention is required by law.
7. Your Privacy Rights
Depending on your location, you may have the following rights:
- Access: Request access to your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your personal data
- Portability: Request a copy of your data in a portable format
- Objection: Object to processing of your personal data
- Restriction: Request restriction of processing
- Withdraw Consent: Withdraw consent for data processing
- Opt-Out: Unsubscribe from marketing communications
To exercise these rights, please contact us at vishal@haipeflow.com
8. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Maintain your session and keep you logged in
- Remember your preferences
- Analyze Service usage and performance
- Provide personalized experiences
You can control cookies through your browser settings. Disabling cookies may limit Service functionality.
9. Third-Party Links
Our Service may contain links to third-party websites (such as Google Review pages). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.
10. Children's Privacy
Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
11. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including:
- Standard contractual clauses
- Adequate data protection frameworks
- Service provider data protection commitments
12. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt-out of sale of personal information (we do not sell your data)
- Right to deletion of personal information
- Right to non-discrimination for exercising CCPA rights
13. European Privacy Rights (GDPR)
If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including those listed in Section 7 above. Our legal basis for processing your data includes:
- Contract: Processing necessary to provide our Service
- Consent: Where you have given explicit consent
- Legitimate Interests: For business operations and service improvement
- Legal Obligation: To comply with legal requirements
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be notified via:
- Email notification to your registered email address
- Prominent notice on our Service
- Updated "Last Updated" date at the top of this policy
Continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.
15. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Haipe Flow
Email: vishal@haipeflow.com
For data protection inquiries specifically, please include "Privacy Request" in your email subject line.
By using Haipe Flow, you acknowledge that you have read and understood this Privacy Policy.