Your data.
Handled carefully.

1. Scope of this policy

This Privacy Policy explains how DezignFlo, LLC ("DezignFlo," "we," "us," or "our") handles personal information when you visit dezignflo.com, contact us, request or purchase services, subscribe to communications, or use a DezignFlo account, administrative area, or client portal (collectively, the "Services"). It does not govern a third party’s own website, application, or privacy practices, even when linked from our Services.

2. Information we collect

The information we collect depends on how you interact with us. You may choose not to provide certain information, but some features or services may then be unavailable.

• Contact and business information, such as your name, email address, telephone number, company, role, website, social profiles, and inquiry details.
• Account information, such as your login email, account identifiers, authentication records, preferences, and client-portal settings. Passwords are handled through our authentication provider and are not visible to DezignFlo in plain text.
• Project and communications data, including briefs, requests, messages, feedback, approvals, files, images, brand assets, deliverables, deadlines, and other content you submit through the Services.
• Transaction information, including plan, billing status, invoices, and limited payment metadata. Payment-card details are collected and processed by our payment processor; DezignFlo does not store complete card numbers.
• Device and usage information, such as IP address, browser and device type, operating system, referring page, pages viewed, dates and times, approximate location inferred from IP, interactions, diagnostics, and security logs.
• Marketing and preference information, including communication choices, form responses, and information you provide in surveys or reviews.

3. Sources of information

We collect information directly from you, automatically from your browser or device, from clients or collaborators who invite you to a project, and from service providers that support payments, authentication, hosting, analytics, communications, and security. We may also receive publicly available professional or business information when relevant to an inquiry or project.

4. How we use information

• Provide, operate, personalize, maintain, and improve the Services and client portal.
• Create and administer accounts, projects, requests, files, approvals, subscriptions, and support communications.
• Process transactions, issue invoices, maintain business records, and prevent payment fraud.
• Respond to inquiries, schedule conversations, provide service updates, and send administrative or security notices.
• Analyze performance and usage, troubleshoot errors, protect accounts, and prevent misuse, fraud, or unlawful activity.
• Send marketing communications where permitted by law. You may unsubscribe at any time using the link in the message or by contacting us.
• Comply with law, enforce agreements, establish or defend legal claims, and protect the rights and safety of DezignFlo, our clients, and others.

5. Legal bases for processing

Where laws in the European Economic Area, United Kingdom, or another jurisdiction require a legal basis, we process personal information as necessary to perform a contract or take requested pre-contract steps, for our legitimate interests in operating and securing our business, to comply with legal obligations, or with your consent. You may withdraw consent at any time, without affecting processing already performed.

6. How we disclose information

We do not sell personal information for money. We disclose information only as reasonably necessary for the purposes described in this policy, including to:

• Vendors and service providers that support cloud hosting, database and file storage, authentication, analytics, email, customer support, security, and payment processing. Our current infrastructure may include Supabase and Stripe.
• Authorized client-account owners, team members, collaborators, and contractors whose access is needed to deliver a project or operate the Services.
• Professional advisers, insurers, auditors, and authorities when reasonably necessary to comply with law or protect legal rights, safety, and security.
• A buyer, successor, or other relevant party in connection with a merger, financing, reorganization, sale of assets, or similar business transaction, subject to appropriate safeguards.
• Other parties at your direction or with your consent.

7. Cookies, analytics, and privacy signals

We and our service providers may use cookies, local storage, pixels, and similar technologies that are necessary for sign-in, security, preferences, site operation, and measurement. You can control many cookies through your browser, although blocking necessary storage may prevent parts of the Services from working.

We do not currently use personal information for cross-context behavioral advertising or sell it as those terms are defined by applicable U.S. state privacy laws. If our practices change, we will update this policy and provide any required choice mechanism. Where legally required, we will recognize supported browser-based opt-out preference signals, such as Global Privacy Control.

8. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described here. Retention depends on the type of information, the length of the client relationship, account and project needs, backup cycles, security and fraud-prevention needs, and legal, tax, accounting, or dispute-resolution requirements. We may retain de-identified or aggregated information that cannot reasonably identify you.

9. Security and client files

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. Client-portal access is restricted by account permissions, and users should use unique passwords, protect sign-in credentials, and promptly report suspected unauthorized access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Do not upload highly sensitive information—such as Social Security numbers, government identification, medical records, or full payment-card data—unless DezignFlo specifically requests it through an approved secure method for a legitimate project need.

10. Your privacy rights and choices

Depending on where you live and subject to legal exceptions, you may have the right to know or access personal information, receive a portable copy, correct inaccuracies, request deletion, restrict or object to processing, withdraw consent, opt out of certain sales, sharing, or targeted advertising, and appeal a decision on a request. You also may opt out of marketing emails at any time. We will not discriminate against you for exercising an applicable privacy right.

To submit a request, email hello@dezignflo.com with the subject "Privacy Request" or use our contact form. Please describe the request and the email associated with your account. We may need to verify your identity and authority before completing it. An authorized agent may submit a request where permitted by law, but we may require proof of authorization. If we deny a request, you may reply to appeal where applicable.

11. California and Nevada notices

California residents may have rights to know, access, correct, delete, and obtain information about disclosures, and to opt out of the sale or sharing of personal information and limit certain uses of sensitive personal information, where the California Consumer Privacy Act applies. DezignFlo does not knowingly sell or share personal information for cross-context behavioral advertising and does not use sensitive personal information to infer characteristics about individuals.

Nevada residents may request to opt out of a future sale of covered information under Nevada law. DezignFlo does not currently sell covered information as defined by Nevada law, but you may submit a verified request through the contact method below.

12. International data transfers

DezignFlo is based in the United States, and our providers may process information in the United States and other countries. Those locations may have different data-protection laws than your country. Where required, we use recognized safeguards for international transfers.

13. Children’s privacy

The Services are intended for adults and business users and are not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided information to us, contact us so we can review and delete it as appropriate.

14. Third-party services and links

The Services may link to or integrate with third-party websites, applications, payment services, or social platforms. Their privacy practices are governed by their own notices, and DezignFlo is not responsible for those practices.

15. Changes to this policy

We may update this policy as our Services, providers, or legal obligations change. We will post the revised policy here and update the date above. If a change is material, we may also provide notice through the Website, client portal, or email as required by law.

16. Contact us

Questions, privacy requests, and complaints may be sent to DezignFlo, LLC at hello@dezignflo.com or through the contact form at dezignflo.com/contact. Please do not include sensitive personal information in an ordinary email. If you are not satisfied with our response, you may have the right to contact the privacy or data-protection authority where you live.