Privacy Policy

Last Updated: December 15, 2024

ArtechFlows ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our workflow automation platform and services (the "Service").

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, password, company name, and billing information
• Profile Information: Job title, phone number, and profile photo (optional)
• Workflow Data: Information you input into the platform including automation rules, integrations, and data flows
• Communications: Messages you send to us via email, contact forms, or support tickets

1.2 Information Collected Automatically

• Usage Data: Pages viewed, features used, time spent, and interaction patterns
• Device Information: IP address, browser type, operating system, device identifiers
• Log Data: Access times, error logs, and system performance metrics
• Cookies: See our Cookie Policy section below for details

2. How We Use Your Information

We use the information we collect to:

• Provide Services: Operate, maintain, and improve our platform
• Account Management: Create and manage your account, authenticate users, and prevent fraud
• Customer Support: Respond to inquiries, troubleshoot issues, and provide technical assistance
• Billing: Process payments, send invoices, and manage subscriptions
• Communications: Send transactional emails via AWS SES (verification, notifications, alerts)
• Analytics: Understand usage patterns and improve our service
• Security: Detect, prevent, and respond to security threats or fraudulent activity
• Legal Compliance: Comply with legal obligations and enforce our terms

3. How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

3.1 Service Providers

We work with trusted third-party service providers who help us operate our business:

• AWS (Amazon Web Services): Cloud hosting and email delivery (AWS SES)
• Payment Processors: Stripe for payment processing
• Analytics Services: Google Analytics for usage insights
• Support Tools: Customer support and communication platforms

These providers are bound by confidentiality agreements and can only use your data to provide services to us.

3.2 Legal Requirements

We may disclose information when required by law, legal process, or government request.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you via email.

4. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data in transit is encrypted using TLS/SSL. Data at rest is encrypted using AES-256.
• Access Controls: Strict role-based access controls and authentication requirements
• Regular Audits: Security assessments, penetration testing, and compliance audits
• Monitoring: 24/7 security monitoring and incident response procedures
• AWS SES Security: Email delivery through AWS SES with SPF, DKIM, and DMARC authentication

5. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have the following rights under GDPR:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restriction: Request restricted processing of your data
• Right to Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing of your personal data
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at privacy@theartechflows.com

6. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Active Accounts: Data retained while your account is active
• Closed Accounts: Most data deleted within 90 days of account closure
• Backups: Backup data may be retained for up to 12 months
• Legal Requirements: Some data retained longer to comply with tax, accounting, or legal requirements

7. Cookie Policy

We use cookies and similar tracking technologies to enhance your experience:

Essential Cookies

Required for the platform to function properly (authentication, security, session management).

Analytics Cookies

Help us understand how users interact with our platform to improve functionality.

Preference Cookies

Remember your settings and preferences for a personalized experience.

You can control cookies through your browser settings. Note that disabling cookies may limit functionality.

8. Your Choices

• Email Preferences: Opt out of non-essential emails by clicking "unsubscribe" in any email
• Account Settings: Update your information and preferences in your account dashboard
• Data Deletion: Request deletion of your account and data by contacting support
• Cookie Management: Adjust cookie preferences through your browser settings

9. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for cross-border data transfers, including Standard Contractual Clauses approved by the European Commission.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a prominent notice on our platform. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us: