Privacy Policy

Last updated: August 10, 2025

This Privacy Policy explains how Supaflow, LLC (“Supaflow,” “we,” “us,” or “our”) collects, uses, and shares information about you when you visit our website atwww.supa-flow.io and any pages or content we control that link to this Policy (collectively, the “Site”).

Scope. This Policy covers the Site and our marketing activities. If you use our paid products or services (“Paid Services”), the processing of Customer Data is governed by a separate Master Subscription Agreement (“MSA”) and, where applicable, a Data Processing Addendum (“DPA”). If this Policy conflicts with an MSA/DPA, the MSA/DPA controls for Customer Data.

1) Information We Collect

We may collect the following categories of information about Site visitors:

• Identifiers & Contact Info: name, email address, and similar information you submit via forms (e.g., “Contact us,” waitlists, or demos).
• Device & Usage Data: IP address, device/browser type, pages visited, time spent, referral URLs, and clickstream data.
• Commercial & Support Info: records of your requests and communications with us.
• Cookies & Similar Technologies: small files used to operate and measure the Site. See “Cookies” below.

2) Sources of Information

• Directly from you when you submit forms, subscribe, or contact us.
• Automatically via cookies and similar technologies when you use the Site.
• From service providers that help us operate the Site, analytics, and communications.

3) How We Use Information

We use information to:

• operate, maintain, secure, and improve the Site;
• respond to inquiries, provide support, and communicate with you;
• analyze Site performance and understand usage;
• market and promote our offerings (you can opt out of marketing at any time);
• comply with law, prevent fraud, and protect our rights.

4) Legal Bases (EEA/UK only)

If you are in the EEA/UK, we process personal data under these legal bases:

• Contract (to respond to your requests or provide information you asked for);
• Legitimate interests (to operate and improve the Site, communicate with you about Supaflow, and ensure security);
• Consent (where required, e.g., certain cookies or marketing);
• Legal obligations (to comply with applicable laws).

5) How We Share Information

We may share information with:

• Service providers who perform services for us (e.g., hosting, analytics, email delivery) under appropriate contracts;
• Professional advisors (lawyers, accountants, auditors) under confidentiality;
• Authorities when required by law or to protect rights, safety, or security;
• Successors in connection with a merger, acquisition, or similar transaction.

We do not sell personal information, and we do not “share” personal information for cross-context behavioral advertising.

6) Cookies and Similar Technologies

We use cookies and similar technologies to operate the Site, remember preferences, measure performance, and attribute advertising conversions.

Cookies we set:

• supaflow_consent -- stores your cookie consent preference (accepted or rejected). Expires after 1 year.
• _ga, _ga_* -- Google Analytics 4 cookies used to distinguish users and track Site usage. Set only after you grant consent.
• _gcl_aw, _gcl_au -- Google Ads cookies used to attribute ad clicks to signups. Set only after you grant consent.

Consent and control:

When you first visit the Site, analytics and advertising cookies are blocked by default. A consent banner asks you to accept or reject cookies. If you accept, we update your consent preference and enable analytics and advertising cookies. If you reject, those cookies remain blocked. Your choice is stored in the supaflow_consent cookie so the banner does not reappear on subsequent visits.

You can change your preference at any time by clicking the “Privacy Settings” link in the Site footer, which clears your stored preference and re-displays the consent banner. You can also manage cookies through your browser settings.

7) Data Retention

We retain information for as long as necessary to fulfill the purposes described in this Policy (for example, to operate the Site and communicate with you), comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary based on the type of data and our business needs.

8) Security

We use reasonable technical and organizational measures designed to protect information we process. However, no system is perfectly secure, and we cannot guarantee absolute security.

9) International Transfers

We are based in the United States. If you access the Site from outside the U.S., your information may be transferred to, stored, or processed in the U.S. and other jurisdictions that may have data protection laws different from your country. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses) for international transfers.

10) Your Privacy Rights

Depending on your location, you may have rights over your personal information, such as the right to request access, correction, deletion, portability, restriction, or to object to certain processing. If processing is based on consent, you can withdraw consent at any time.

To exercise rights, contact us at hello@supa-flow.io. We may ask for information to verify your request. If we deny your request, you may have the right to appeal by replying to our denial with “Appeal” in the subject line. If you are in the EEA/UK, you may also lodge a complaint with your local supervisory authority.

California residents: We do not sell or share personal information for cross-context behavioral advertising. You may still contact us at the address above to exercise rights available under California law.

11) Do Not Track

Your browser may offer a “Do Not Track” signal. Because there is no consistent industry standard, we do not respond to DNT signals. We will update this Policy if standards emerge.

12) Children’s Privacy

The Site is not directed to children, and we do not knowingly collect personal information from children under 13 (or under 16 in certain jurisdictions). If you believe a child has provided us personal information, please contact us and we will take appropriate steps to delete it.

13) Third-Party Links

The Site may link to third-party sites or services. We are not responsible for the practices of those third parties, and their privacy policies govern their handling of your information.

14) Changes to This Policy

We may update this Policy from time to time. When we make material changes, we will take reasonable steps to notify you (e.g., by posting a notice on the Site). The “Last updated” date above will reflect the most recent changes.

15) Contact Us

Questions or requests? Email us at hello@supa-flow.io.