Privacy Policy

1. Who We Are

This Privacy Policy explains how ClickFlow Grow Limited ("we", "us", "our"), a company registered in England and Wales, collects, uses, and protects your personal data when you use ClickFlowBrand (the "Service"). We are the data controller for the purposes of UK GDPR and the Data Protection Act 2018.

If you have any questions about this policy or how we handle your data, contact us at [email protected].

2. What Data We Collect

We collect the following categories of personal data:

3. How We Use Your Data

We use your personal data for the following purposes and on the following legal bases:

• Contract performance:To provide, maintain, and improve the Service; to process payments; to send transactional emails (e.g. password resets, subscription confirmations).
• Legitimate interests:To monitor and improve platform security; to analyse usage patterns to enhance the Service; to prevent fraud and abuse.
• Legal obligation:To comply with applicable laws, regulations, and lawful requests from authorities.
• Consent:To send marketing communications about new features or offers (you may withdraw consent at any time by unsubscribing).

4. AI Processing of Your Content

The Service uses third-party AI providers to generate content based on your inputs. Your prompts and brand information are transmitted to these providers solely to generate the requested output. We do not sell your content data to third parties or use it to train AI models without your explicit consent.

You are responsible for ensuring that any personal data you include in prompts or brand profiles is handled in accordance with your own privacy obligations.

5. Sharing Your Data

We do not sell your personal data. We share it only with:

• Stripe — for payment processing (subject to Stripe's Privacy Policy)
• AI service providers — to generate content in response to your requests
• Email service providers — to send transactional and marketing emails
• Analytics providers — to understand how the Service is used (anonymised where possible)
• Legal authorities — where required by law or to protect our rights

All third-party processors are contractually bound to process your data only on our instructions and in accordance with applicable data protection law.

6. Data Retention

We retain your account data for as long as your account is active and for up to 2 years following account closure, unless a longer retention period is required by law. Content you delete from the Service is removed from active storage within 30 days. Billing records are retained for 7 years in accordance with UK tax and accounting requirements.

7. International Transfers

Some of our third-party service providers are based outside the UK. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO), to protect your data to the same standard as within the UK.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate data
• Right to erasure — to request deletion of your data ("right to be forgotten")
• Right to restriction — to request that we limit how we process your data
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests or for direct marketing
• Rights related to automated decision-making — not to be subject to solely automated decisions that significantly affect you

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

9. Cookies

The Service uses essential cookies to maintain your login session and ensure the platform functions correctly. We do not use third-party advertising cookies. Analytics cookies, where used, are anonymised. By using the Service, you consent to the use of essential cookies.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted data transmission (HTTPS), hashed password storage, and access controls. However, no system is completely secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via an in-app notice. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact Us

For any privacy-related queries or to exercise your rights, contact us at: