Privacy Policy

Information We Collect

When you register for FlowForg ERP, we collect the following information:

• Name, email address, and password (hashed, never stored in plain text)
• Company name, address, and contact information
• Billing details - payments are processed securely by our Merchant of Record, Paddle.com; we never receive or store your full card number
• Usage data such as features accessed, pages visited, and actions performed
• Device and browser information for security and support purposes

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the FlowForg ERP platform
• Process transactions and send related billing notifications
• Respond to your support requests and communicate important updates
• Monitor and prevent fraudulent or unauthorized access
• Analyze usage patterns to develop new features

We do not sell your personal data to third parties.

Sharing of Information

We share your information only in limited circumstances:

• Payment processing: Paddle.com acts as our Merchant of Record and processes your payment, billing, and tax details under its own privacy policy.
• Website analytics: Google Analytics and Microsoft Clarity help us understand visits and usage on our public marketing pages under Google's privacy policy and Microsoft's privacy statement.
• Service providers: Trusted vendors who help us deliver the service (hosting, email) under strict confidentiality agreements.
• Legal requirements: When required by law, court order, or governmental regulation.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice to you.

Data Security

We implement industry-standard security measures including:

• SSL/TLS encryption for all data transmission
• Bcrypt-hashed passwords with salting
• Regular automated backups with encrypted storage
• Access controls limiting data access to authorized personnel only
• Login audit logs to detect unauthorized access attempts

Cookies

FlowForg ERP uses essential cookies to maintain login sessions, plus Google Analytics and Microsoft Clarity on public marketing pages to measure traffic and understand page usage. We do not use these analytics tools for advertising. You can configure your browser to block cookies, but this may affect platform functionality.

Your Rights

Depending on your location, you may have the following rights:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your business data in a portable format
• Object to or restrict certain processing activities

To exercise any of these rights, contact us at hello@zstechlabs.com.

Data Retention

We retain your data for as long as your account remains active. After account closure, your data is retained for 30 days before permanent deletion, unless legally required to retain it longer.

Policy Changes

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notice. Your continued use of the service after such changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or your data, please contact: