Privacy Policy
Last updated: February 10, 2026
At FlowSmartly, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, including our website, applications, and SMS marketing services. Please read this policy carefully. By using FlowSmartly, you consent to the practices described in this policy.
1. Information We Collect
We collect information that you provide directly, information collected automatically, and information from third-party sources to deliver and improve our services.
Account Data
When you create an account, we collect your name, email address, username, password (stored in hashed form), and optional profile information such as your avatar, bio, and social media links.
Contact Data
If you use our SMS marketing or email marketing features, we collect and store the contact information you upload or enter, including names, phone numbers, email addresses, and any custom fields or tags you associate with your contacts. You are responsible for ensuring you have proper consent to store and message these contacts.
Usage Data
We automatically collect information about how you interact with our platform, including pages visited, features used, time spent on pages, browser type, device information, IP address, and referring URLs.
Payment Data
When you make purchases or subscribe to a plan, our payment processor (Stripe) collects your payment card details, billing address, and transaction history. FlowSmartly does not directly store your full credit card numbers. We retain records of transactions, subscription plans, and credit balances.
SMS & Communication Data
When you use our SMS marketing features, we collect and process phone numbers, message content, opt-in and opt-out records, delivery status reports, and timestamps. This data is necessary to deliver messages, maintain compliance records, and provide campaign analytics.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Service Delivery: To provide, maintain, and improve our platform, including content creation tools, social media scheduling, AI-powered features, and marketing campaigns.
- Communication: To send you service-related notifications, updates, security alerts, and support messages. We may also send promotional communications with your consent.
- SMS Marketing on Your Behalf: To send SMS messages to your contacts as directed by you through our campaign tools. FlowSmartly acts as a service provider facilitating SMS communication between you and your audience.
- Analytics: To analyze usage patterns, measure the effectiveness of campaigns, generate reports, and improve our features and user experience.
- Security & Fraud Prevention: To detect, prevent, and address security issues, abuse, and fraudulent activity on our platform.
- Legal Compliance: To comply with applicable laws, regulations, and legal processes, including the Telephone Consumer Protection Act (TCPA), CAN-SPAM Act, and GDPR where applicable.
3. SMS Data Handling
FlowSmartly provides SMS marketing tools that enable our users (businesses and individuals) to communicate with their audiences via text message. All SMS communications are processed through our secure messaging infrastructure. The following describes how we handle SMS-related data:
Phone Numbers
Phone numbers are collected by our users from their own customers and contacts with appropriate consent. These numbers are stored securely in our database and transmitted to our messaging provider solely for the purpose of delivering SMS messages. We do not sell, rent, or share phone numbers with third parties for marketing purposes.
Message Content
Message content is created by our users and stored in our system for campaign management, scheduling, and analytics. We do not modify message content. Message logs may be retained for compliance, support, and analytics purposes.
Opt-In Records
Our users are required to obtain proper consent from their contacts before sending SMS messages. We maintain records of opt-in status, including the date, time, and method of consent, to support compliance with the TCPA and carrier requirements.
Delivery Status
We receive delivery status information from our messaging provider (delivered, failed, undelivered, etc.) to provide campaign analytics and troubleshoot delivery issues. This data is associated with individual messages and retained as part of campaign records.
4. Data Sharing
We share your information only in the following limited circumstances:
- SMS Infrastructure Provider: Phone numbers and message content are shared with our messaging provider to deliver SMS messages. Our provider processes this data in accordance with their own privacy policy.
- Stripe (Payment Processor): Payment information is shared with Stripe to process transactions. Stripe handles payment data in accordance with PCI DSS standards and their Privacy Policy.
- OpenAI (AI Services): Content you submit to our AI-powered features (such as content generation and image creation) may be sent to OpenAI for processing. OpenAI processes this data in accordance with their Privacy Policy.
- Legal Requirements: We may disclose information if required by law, subpoena, court order, or governmental regulation, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. Ever.
5. Data Security
We implement industry-standard security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption in Transit: All data transmitted between your browser and our servers is encrypted using TLS (Transport Layer Security).
- Encryption at Rest: Sensitive data, including passwords and API keys, is encrypted at rest using strong cryptographic algorithms.
- Access Controls: Access to personal data is restricted to authorized personnel who require it for legitimate business purposes. We employ role-based access controls and audit logging.
- Secure Infrastructure: Our platform is hosted on secure infrastructure with regular security updates, vulnerability monitoring, and automated backups.
- Password Security: User passwords are hashed using bcrypt and are never stored in plain text.
While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to promptly addressing any security incidents and notifying affected users as required by law.
6. Your Rights
Depending on your location and applicable laws, you may have the following rights regarding your personal data:
- Right of Access: You may request a copy of the personal information we hold about you.
- Right of Correction: You may request that we correct any inaccurate or incomplete personal information. You can also update most of your information directly through your account settings.
- Right of Deletion: You may request that we delete your personal information, subject to certain legal exceptions (such as data we are required to retain for compliance purposes).
- Right to Opt Out: You may opt out of promotional communications by following the unsubscribe instructions in our emails or by contacting us directly.
- Right to Data Portability: Where applicable, you may request a machine-readable copy of your data.
- Right to Restrict Processing: You may request that we limit the processing of your personal data under certain circumstances.
To exercise any of these rights, please contact us at support@flowsmartly.com. We will respond to your request within 30 days.
7. SMS Opt-Out
If you are a recipient of SMS messages sent through FlowSmartly, you have the right to opt out at any time.
How to Opt Out
- Reply STOP: Reply "STOP" to any SMS message you receive through our platform. Your opt-out will be processed immediately and you will receive a confirmation message.
- Contact the Sender: Reach out directly to the business or individual who sent you the message and request to be removed from their contact list.
- Contact FlowSmartly: Email support@flowsmartly.com with the phone number you wish to unsubscribe and we will process your request.
After Opt-Out
Once you opt out, your phone number will be added to a suppression list and no further marketing messages will be sent to you from that sender through our platform. Your opt-out record is retained to ensure compliance. Please note that opting out of messages from one sender does not automatically opt you out of messages from other senders using our platform.
9. Children's Privacy
FlowSmartly is not intended for use by children under the age of 16 (or 13 in jurisdictions where a lower age of consent applies). We do not knowingly collect personal information from children under these ages.
If we become aware that we have inadvertently collected personal information from a child under the applicable age, we will take steps to delete that information as promptly as possible. If you believe we may have collected information from a child, please contact us at support@flowsmartly.com.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Update the "Last updated" date at the top of this page.
- Post a prominent notice on our platform or send you a notification via email.
- Where required by law, obtain your consent before applying the changes to your existing data.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:
We will make every effort to respond to your inquiry within 30 business days.