**1. What this Privacy Policy Covers**

This Privacy Policy covers how we treat Personal Data that we gather when you access or use our Services. “Personal Data” means any information that identifies or relates to a particular individual and also includes information referred to as “personally identifiable information” or “personal information” under applicable data privacy laws, rules or regulations. This Privacy Policy does not cover the practices of companies we don’t own or control or people we don’t manage.

**2. Personal Data**

**2.1. Categories of Personal Data We Collect**

| Information | Purpose |
| ----------- | ------- |
| Information you provide us about you and your business (name, business name, address, email, phone number) | To provide you with the use of our platform and other related services (e.g., confirm identity, contact you, invoice you), send updates about new products, comply with legal requirements, prevent fraudulent use |
| Payment information | To charge for our services |
| Information about how you access our website | To provide and improve our platform, personalize the platform for you, advertise products, prevent fraudulent use |

**2.3. Our Commercial or Business Purposes for Collecting Personal Data**

- **Providing, Customizing and Improving the Services**  
  - Creating and managing your account  
  - Providing support and assistance for the Services  
  - Analyzing trends and consumer interactions  
  - Improving the Services, including internal analytics and product development  
- **Marketing the Services**  
  - Providing customized offers or promotions  
- **Corresponding with You**  
  - Responding to correspondence and contacting you  
- **Meeting Legal Requirements and Enforcing Legal Terms**  
  - Fulfilling legal obligations and protecting rights, property or safety

We will not collect additional categories of Personal Data or use the Personal Data we collected for materially different or incompatible purposes without providing you notice.

**3. How We Disclose Your Personal Data**

We disclose your Personal Data to:  
- **Service Providers**: Help us provide the Services or perform business functions  
  - Hosting, technology, and communication providers  
  - Payment processors (e.g., Stripe, Plaid)  
- **Advertising Partners**: Help us market our services and provide offers of interest

**3.1. Legal Obligations**  
We may disclose Personal Data with third parties for legal reasons.

**3.2. Business Transfers**  
Your Personal Data may be transferred to a third party if we undergo a merger or acquisition.

**3.3. Data that is Not Personal Data**  
We may create aggregated or anonymized data from the Personal Data we collect for our lawful business purposes.

**4. Tracking Tools, Advertising and Opt-Out**  
The Services use cookies and similar technologies to analyze trends and improve our Services.

We use the following types of Cookies:  
- **Essential Cookies**: Required for features you requested.  
- **Functional Cookies**: Record your choices and settings.  
- **Performance Cookies**: Understand how visitors use our Services.  
- **Advertising Cookies**: Collect data about online activity and interests.

You can decide whether to accept Cookies through your browser settings.

**4.1. Information about Interest-Based Advertisements**  
We may serve targeted advertisements through the services.

**4.2. Opt-out Choices**  
You can opt-out of targeted advertising through DAA and NAI pages.

**5. Data Security and Retention**  
We seek to protect your Personal Data from unauthorized access and retain it as necessary to provide Services or comply with legal obligations.

**6. Personal Data of Children**  
We do not knowingly collect Personal Data about children under 16.

**7. California Resident Rights**  
California residents have specific rights under the CCPA, including access, deletion, and correction of Personal Data.

**8. Colorado Resident Rights**  
Colorado residents have rights under the CPA, including access, correction, deletion, and targeted advertising opt-out.

**9. Connecticut Resident Rights**  
Connecticut residents have rights under the CTDPA to access, correct, delete, and portability of Personal Data.

**10. Utah Resident Rights**  
Utah residents have rights under the UCPA including access, portability, and deletion.

**11. Virginia Resident Rights**  
Virginia residents have rights under the VCDPA including access, correction, and deletion inquiries.

**12. Exercising Your Rights under State Privacy Laws**  
To exercise your rights, you may contact us providing sufficient information to verify your identity.

**13. Other State Law Privacy Rights**  
California residents can contact us to prevent disclosure of Personal Data for third parties' marketing.

**14. Changes to this Privacy Policy**  
We may change this Privacy Policy from time to time and will alert you to changes.

**15. Contact Information**  
For questions, contact us at help@flow.space.