Privacy policy

Draft for attorney review. Last updated October 18, 2026.

What we collect

• Merchants: business name, email, sign-in details, and the business and identity details required to accept payments.
• Payers: name, email, the amount and what it was for. Card and bank numbers are entered into secure fields run by our payment processor and are not stored on Flow servers.
• Technical data: IP address and browser type, used for security.

How we use it

To process payments, send receipts, prevent fraud, meet legal duties and support our users. We do not sell personal information.

Who we share it with

Our payment processor, Stripe, receives the information needed to verify merchants and process payments, under its own privacy policy. We also share information when the law requires it.

How long we keep it

Payment records are kept for as long as tax and financial rules require.

Your choices

You can ask for a copy of your information or ask us to correct or delete it, subject to the records we must keep by law. Contact [email protected].