1. Introduction
This Privacy Policy explains how Excelsior Labs collects, uses, stores, and protects personal information when you use FlowBase.
2. Information we collect
We may collect:
- Name, email address, and account information.
- Organization and business information.
- Client, invoice, contract, approval, and transaction information entered into FlowBase.
- Subscription and payment-related information.
- Technical information such as IP address, browser, device, and activity logs.
- Messages and support requests sent to us.
3. How we use information
We use information to:
- Create, authenticate, and maintain user accounts.
- Provide and operate FlowBase features.
- Process subscriptions and payments.
- Provide customer support.
- Send service, account, and billing communications.
- Secure the service and prevent fraud or misuse.
- Diagnose technical problems and improve FlowBase.
- Comply with applicable legal obligations.
4. Business data uploaded by users
FlowBase users may upload information relating to their clients, employees, or other individuals. The user is responsible for ensuring they have permission and a lawful reason to provide and process that information through FlowBase.
5. Payments
Subscription payments may be processed by third-party payment providers. Excelsior Labs does not normally store complete payment card or banking credentials. Payment providers process that information under their own terms and privacy policies.
6. Service providers
We may use trusted service providers for authentication, database hosting, cloud storage, email delivery, payment processing, and technical infrastructure.
These providers may only receive information reasonably necessary to perform their services and are subject to their own privacy and security obligations.
7. Sharing personal information
We do not sell personal information. We may share information:
- With service providers operating FlowBase.
- When you request or authorize the disclosure.
- To comply with applicable law or a lawful request.
- To protect users, Excelsior Labs, or the public.
- During a business restructuring, merger, acquisition, or asset transfer, subject to appropriate protections.
8. International processing
Some service providers may process information outside India. Where applicable, we take reasonable steps to ensure that such processing is conducted with appropriate safeguards and in accordance with applicable law.
9. Data retention
We retain personal information for as long as reasonably necessary to provide FlowBase, maintain business and transaction records, resolve disputes, enforce agreements, and comply with legal obligations.
Information may be deleted or anonymized when it is no longer required, subject to legal, security, backup, and accounting requirements.
10. Security
We use reasonable technical and organizational measures intended to protect information from unauthorized access, disclosure, alteration, or loss. However, no online service or storage system can guarantee absolute security.
You are responsible for protecting your account credentials and notifying us if you suspect unauthorized access.
11. Cookies and local storage
FlowBase may use cookies, browser storage, or similar technologies for authentication, preferences, security, and essential service functionality.
12. Your choices and rights
Subject to applicable law, you may request to:
- Access information associated with your account.
- Correct inaccurate or incomplete information.
- Delete your account and eligible personal information.
- Withdraw consent where processing depends on consent.
- Raise a question or grievance about our use of your data.
We may need to verify your identity before completing a request. Some information may be retained where required by law or for legitimate security, fraud-prevention, or record-keeping purposes.
13. Children’s privacy
FlowBase is intended for business users and is not directed to children. We do not knowingly collect children’s personal information without any consent required by applicable law.
14. Changes to this policy
We may update this Privacy Policy when our services, practices, or legal obligations change. The revised policy will be published on this page with an updated date.