Privacy Policy
Last Updated: September 5, 2026
•
Effective Date: September 5, 2026
Flownelo ("Flownelo", "we", "us", or "our") respects your privacy and is committed to handling personal data responsibly.
This Privacy Policy explains how Flownelo collects, uses, stores, protects, and otherwise processes personal data when you access or use the Flownelo website, application, platform, and related services (collectively, the "Services").
We aim to keep this Privacy Policy clear and understandable so that you can understand what information we collect, why we use it, how it is protected, and what choices may be available to you.
1. About Flownelo
Flownelo is a business management platform designed to help organizations manage and coordinate business activities, including sales, customers, inventory, procurement, finance, human resources, payroll, manufacturing, orders, and related operations.
The Services are primarily intended for organizations and their authorized users. Organizations using Flownelo may enter information relating to their employees, customers, suppliers, contractors, business contacts, and other individuals into the Services.
In such circumstances, the organization may determine the purposes for which that information is used, while Flownelo may process the information on behalf of the organization to provide, maintain, secure, and support the Services.
2. Scope of This Privacy Policy
This Privacy Policy applies to personal data processed in connection with:
This Privacy Policy does not govern third-party websites, applications, products, or services that are not operated or controlled by Flownelo.
3. Information We Collect
The information collected by Flownelo depends on how you use the Services.
3.1 Account and User Information
When an account is created or used, we may collect information such as:
- • Name, email address, and phone number
- • Login credentials and authentication information
- • Organization information, user role, and permissions
- • Account preferences and subscription-related information
- • Other information voluntarily provided by the user
Passwords and authentication credentials are handled using appropriate security practices and are not stored by Flownelo in plain-text form.
3.2 Organization and Business Information
Organizations using Flownelo may provide information including:
3.3 Information About Other Individuals
Organizations may enter personal data relating to employees, customers, suppliers, contractors, business contacts, or other individuals associated with their business activities.
3.4 Technical and Usage Information
When you access or use the Services, we may automatically collect certain technical and usage information, including:
- IP address
- Browser type and version
- Device & OS information
- Login & session activity
- Date and time of access
- Usage & diagnostic information
- Error information
- Security & audit logs
- Service performance data
We use this information primarily to operate, secure, maintain, troubleshoot, and improve the Services.
4. How We Use Personal Data
We may process personal data for purposes including:
✓ Creating and managing accounts
✓ Providing and operating the Services
✓ Authenticating users & managing access
✓ Processing subscriptions and payments
✓ Providing customer support
✓ Sending service-related communications
✓ Maintaining security & monitoring performance
✓ Maintaining backups and disaster-recovery
✓ Detecting and preventing fraud or misuse
✓ Troubleshooting technical problems
✓ Developing and maintaining features
✓ Improving reliability and functionality
✓ Complying with legal and regulatory requirements
✓ Responding to lawful requests
✓ Protecting rights, property, and safety of users
✓ Other lawful purposes related to providing Services
We aim to collect and use personal data only to the extent reasonably necessary for the relevant purpose.
5. Legal Basis for Processing
Depending on the circumstances and applicable law, Flownelo may process personal data:
- With the individual's consent;
- Where processing is permitted or required by applicable law;
- Where processing is necessary to provide a service requested by the individual;
- To administer and secure an account or organization;
- For security, fraud prevention, and protection of the Services;
- To comply with legal or regulatory obligations; or
- For other lawful purposes permitted under applicable law.
Where consent is required, Flownelo will seek consent through an appropriate affirmative mechanism and will provide information necessary for the individual to make an informed decision. Flownelo does not treat a person's mere access to or use of the Services as consent for a purpose where applicable law requires affirmative consent.
6. Consent and Withdrawal of Consent
Where Flownelo relies on consent as the basis for processing personal data, the relevant request for consent will be presented in a clear and understandable manner. Where consent is required, consent will be obtained through an appropriate affirmative action rather than passive acceptance.
Where consent is the basis for processing, you may withdraw your consent through available account or privacy controls or by contacting us. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal, but it may affect our ability to provide certain optional services. Where processing may continue on another lawful basis, Flownelo may continue that processing to the extent permitted or required by applicable law.
7. Organization Data and Responsibility
Flownelo provides organizations with software and infrastructure for managing their business information. Organizations using Flownelo are responsible for:
The accuracy of information entered into the Services and determining what information they collect and store.
Ensuring they have the necessary rights, permissions, notices, and lawful basis to process personal data.
Managing their users and access permissions, and protecting their account credentials.
Using the Services in accordance with applicable laws and responding appropriately to requests from individuals whose personal data they control.
Flownelo does not independently verify the accuracy, completeness, legality, or reliability of information entered, uploaded, imported, or otherwise provided by an organization or its users.
8. How We Share Information
Flownelo does not sell or rent organization data or personal data as a general business practice.
We may provide access to or share information where reasonably necessary to operate the Services or where permitted or required by applicable law.
8.1 Service Providers
Flownelo may use trusted third-party service providers to support the Services, including providers for cloud hosting, database infrastructure, file and storage services, email delivery, payment processing, monitoring, security, analytics, and technical infrastructure. Such providers may process information only as reasonably necessary to provide services to Flownelo or as otherwise permitted by applicable law.
8.2 Legal and Regulatory Requirements
We may disclose information where reasonably necessary to comply with applicable law, respond to lawful requests from governmental or judicial authorities, protect the rights or property of Flownelo, investigate suspected fraud or abuse, protect users or the public, or enforce applicable agreements.
8.3 Business Transactions
If Flownelo or the business operating the Services becomes involved in a merger, acquisition, investment, restructuring, financing, sale of assets, or similar transaction, information associated with the Services may be transferred as part of that transaction, subject to applicable law.
9. Third-Party Integrations
Flownelo may allow organizations to connect third-party applications, platforms, or services. When an organization chooses to connect a third-party service, information may be exchanged between Flownelo and that service according to the organization's configuration and instructions.
Third-party services operate independently from Flownelo and may have their own privacy policies, security practices, terms, and data-retention policies. Flownelo is not responsible for the privacy practices, security, availability, functionality, or actions of third-party services that are outside Flownelo's reasonable control.
10. Data Security
Flownelo takes reasonable technical and organizational measures designed to protect personal data and business information against unauthorized access, alteration, disclosure, loss, misuse, or destruction.
Depending on the circumstances, these measures may include authentication controls, access controls, role-based permissions, encryption, security monitoring, audit logging, backup and recovery mechanisms, infrastructure security measures, software and system controls, and administrative safeguards.
11. Data Retention
Flownelo retains information for as long as reasonably necessary for the purposes for which it was collected, including to provide the Services, maintain accounts, fulfill contractual or operational requirements, maintain security, resolve disputes, prevent fraud and abuse, and comply with legal or regulatory obligations.
Different categories of information may therefore be retained for different periods. Where information is no longer required for the relevant purpose and there is no legal or legitimate reason to retain it, Flownelo may delete, anonymize, or otherwise dispose of it in accordance with applicable requirements and our data-management practices.
12. Organization Deletion & Backups
12. Organization Deletion
An authorized organization administrator may request permanent deletion of the organization's Flownelo account and associated organization data. Once deletion has been confirmed and completed, the organization and its associated data will be permanently removed from Flownelo's active production systems.
Depending on the information held, this may include organization records, user accounts, customer records, supplier records, products, inventory, orders, invoices, financial records, employee information, payroll, manufacturing records, and uploaded files.
Deletion from active production systems is intended to be permanent and generally cannot be reversed. Organizations should therefore ensure that they have exported or otherwise retained any information they are legally or operationally required to keep before requesting deletion.
13. Backup and Disaster-Recovery Copies
Flownelo may maintain backups and other recovery mechanisms for security, business continuity, and disaster-recovery purposes. When an organization is deleted from active production systems, copies of information may temporarily remain in backups created before the deletion. Such backup copies:
- Are not maintained for ordinary operational access;
- Are not intended for normal continued use;
- Remain subject to applicable security controls; and
- Are automatically overwritten, deleted, or otherwise removed according to the applicable backup-retention cycle.
As a result, deletion from active production systems does not necessarily mean that every technical copy disappears immediately at the exact time deletion is completed. Once the applicable backup-retention period expires, the relevant information will ordinarily no longer remain in those backup copies.
14. Your Privacy Rights
Subject to applicable law and any applicable limitations, individuals may have rights relating to their personal data, including:
Right to Access
Obtain information about the personal data being processed.
Right to Correction
Request correction of inaccurate or incomplete personal data.
Right to Erasure
Where applicable, request deletion or erasure of personal data.
Right to Withdraw Consent
Withdraw consent where processing is based on consent.
Right to Grievance
Raise a privacy-related grievance with Flownelo.
Right to Nominate
Nominate another individual to exercise applicable rights.
Where personal data has been provided to Flownelo by an organization, we may direct the request to the relevant organization or assist the organization in responding to the request, as appropriate. We may need to verify your identity before processing certain requests.
15. Additional Information
16. Cookies and Similar Technologies
Flownelo may use cookies and similar technologies to support the operation, security, functionality, and performance of the Services. You may be able to control certain cookies through your browser or device settings. Disabling necessary cookies may affect the availability or functionality of certain parts of the Services.
17. Communications
Flownelo may send communications necessary for operating the Services (e.g., account notifications, security messages, support communications). Where applicable, promotional or marketing communications will be handled in accordance with applicable law and available communication preferences.
18. International Processing
Depending on the infrastructure and service providers used by Flownelo, personal data may be processed or stored in locations outside the state or country in which you are located. Where information is transferred or processed outside India or another applicable jurisdiction, Flownelo will take measures required by applicable law.
19. Data Breaches and Security Incidents
Flownelo maintains processes intended to detect, assess, respond to, and address security incidents involving personal data. Where a personal data breach triggers notification obligations under applicable law, Flownelo will make the notifications required by law. Nothing in this section should be interpreted as a guarantee that a security incident will never occur.
20. Children's Privacy
The Services are primarily intended for businesses and their authorized users and are not directed toward children. We do not knowingly seek to collect personal data from children in circumstances where such collection is prohibited by applicable law.
21. Data Accuracy and User Responsibility
Flownelo provides software tools for storing, processing, displaying, and managing information. Flownelo does not guarantee the accuracy, completeness, timeliness, or suitability of information entered into the Services by users or obtained from third-party systems. Organizations remain responsible for reviewing their information and maintaining appropriate records.
22. Service Availability & Limitation of Responsibility
22. Service Availability: Flownelo works to keep the Services reliable and available. However, the Services may occasionally be unavailable or affected by circumstances including planned maintenance, software updates, infrastructure failures, internet or network problems, cyberattacks, or other circumstances beyond our reasonable control. Flownelo does not guarantee uninterrupted, continuous, or error-free availability of the Services.
23. Limitation of Responsibility: To the maximum extent permitted by applicable law, Flownelo and the individuals and service providers involved in operating the Services will not be responsible for losses, damages, interruptions, unauthorized access, data loss, business disruption, or other consequences arising from circumstances outside our reasonable control or from the acts or omissions of users, organizations, third parties, external systems, or third-party service providers.
Nothing in this Privacy Policy is intended to exclude or limit any liability, responsibility, or right that cannot lawfully be excluded or limited under applicable law.
24. Changes & Governing Law
24. Changes to This Privacy Policy: Flownelo may update this Privacy Policy from time to time to reflect changes to the Services, our data practices, technology, applicable laws, or regulatory requirements. When material changes are made, we may provide reasonable notice through the Services, website, email, or another appropriate method where required.
25. Governing Law: This Privacy Policy is governed by the laws applicable in India, subject to any mandatory rights and protections available under applicable law. Any dispute relating to this Privacy Policy will be handled in accordance with the applicable dispute-resolution and jurisdiction provisions contained in the Flownelo Terms of Service, subject to applicable law.
27. Additional Terms: Additional privacy notices, contractual terms, data-processing agreements, or other documentation may apply to particular Flownelo Services, integrations, or organizations where appropriate.
26. Contact Us & Grievances
Privacy & Grievance Contact
For privacy-related questions, requests, or grievances.