Privacy Policy

PrimeFlow (the “Business” or “PrimeFlow”) is committed to the privacy of its users’ personal information. This policy sets out what information is collected, how it is processed, what your rights are, and the measures we use to protect the data.

Use of the PrimeFlow platform, the website or any other service constitutes full consent to this policy. If you do not agree, do not use the service.

• PrimeFlow (the Business).
• Contact: support@primeflow.ai

PrimeFlow acts as the “database owner” with respect to the personal information of its customers (the businesses using the platform), and as a “data processor” with respect to the personal information of third parties (for example, the customer’s end customers), as detailed in Section 10 below.

We collect information that is necessary to provide, improve and secure the service and to comply with the law.

3.1 Information You Provide to Us

• Identification and contact details: full name, business name, VAT dealer / company registration number, email address, phone number, address.
• Billing details: payment method data (transferred directly to an external payment processor; we do not store full credit card numbers).
• Business content you upload: customer and supplier data, calendars, automations, chatbots, messages, financial data (income, expenses, invoices), marketing campaigns, landing pages, and any other content entered or created in the course of using the platform.

3.2 Information Collected Automatically

• Usage data: IP address, browser type, operating system, pages viewed, clicks, access and activity logs.
• Device data: cookie identifiers, beacons, anonymous analytics tags.

Information is processed for the following purposes:

• Providing and operating the service – account creation, authentication, data processing, running automations, generating reports, technical operations.
• Billing and collection – handling payments, issuing invoices.
• Support and customer service – responding to inquiries, fixing faults, applying preferences.
• Security and fraud prevention – monitoring, detecting and addressing unauthorized access, malicious activity or violations.
• Improving the platform – analysis of statistical, anonymous and aggregated data for development and for improving performance and the interface.
• Direct marketing – sending messages, updates, tips, offers and promotions, subject to your express consent (you may unsubscribe at any time).
• Legal compliance – disclosing information to competent authorities pursuant to a lawful demand.

Processing is carried out on one or more of the following bases:

• Our engagement agreement with you (contract) – in order to provide the service.
• Express consent – for example, for marketing mailings.
• Legitimate interest – such as security, system improvement and aggregated analysis.
• Legal obligation – for example, retaining financial data for tax purposes.

We may transfer information to third parties only to the extent required, and subject to strict contractual restrictions:

• Infrastructure and hosting providers: cloud services (such as AWS, Google Cloud).
• Payment processors: an external payment processor for processing payments.
• Technical support and BI providers: data analytics, monitoring and bug-tracking tools – to the minimum extent and as anonymously as possible.
• Professional advisers: lawyers and accountants – subject to a duty of confidentiality.
• Law enforcement authorities: where there is a legal obligation to do so.

PrimeFlow will transfer personal information to an acquiring party in the event of a merger, acquisition or sale of the Business’s assets, subject to the acquirer’s undertaking to comply with this policy.

Information may be stored and processed on servers outside Israel, including in Europe or the United States. Any such transfer will be carried out in compliance with appropriate safeguards as required by law (such as standard contractual clauses), to ensure a level of protection consistent with Israeli law and European law (GDPR).

Use of the services in itself constitutes consent to these transfers.

PrimeFlow takes reasonable technical and organizational measures to protect information – encryption in transit (SSL/TLS), firewalls, access control, strict permissions and log monitoring.

However, no security on the internet is perfect. The user uploads information at their sole responsibility and acknowledges that PrimeFlow shall not be liable for any unauthorized access, leak, loss, alteration of or damage to information – except in cases of gross negligence on the part of PrimeFlow and to the extent that such liability cannot be excluded by law.

PrimeFlow shall not be responsible for the user’s actions (including sharing a password) or for breaches on the customer’s side.

• Customer personal information: will be retained during the period of active use and for 90 days after it ends, to allow export. Thereafter it will be deleted or anonymized.
• Financial data (invoices, transactions): retained for 7 years as required under tax law.
• End-customer information: will be retained in accordance with the customer’s instructions (as the owner of the information) and deleted upon termination of the contract, except for retention for statutory backup purposes.
• In the event of a legal dispute, PrimeFlow may suspend deletion until the dispute is resolved.

When you (the customer) upload personal information of third parties (for example, details of your customers or suppliers), we act as the “data processor” (Processor) and you act as the “data owner” (Controller).

• We process this information solely in accordance with your instructions, for the purpose of providing the services.
• The details of data processing, security, your rights and our obligations are set out in a Data Processing Agreement (DPA), attached as a separate appendix and forming an integral part of the agreement with you.
• You undertake that you have obtained all consents, permits and the legal basis required to upload this information and to have it processed by PrimeFlow. PrimeFlow shall not be liable for the absence of any such consent.

In accordance with the law, you have the rights set out below. To exercise them, contact us by email at support@primeflow.ai:

• Access: to know what personal information about you we hold.
• Rectification: to correct information that is wrong, incomplete or inaccurate.
• Erasure: to request deletion of information, subject to exceptions (for example, retention required by law).
• Restriction: to request restriction of processing under certain conditions.
• Portability: to receive a copy of the information you provided in a readable format.
• Objection: to object to processing (including direct marketing).
• Unsubscribing from mailings: you may unsubscribe at any time via the “unsubscribe” link at the bottom of every mailing.

We will handle requests promptly and in accordance with the law. We may be required to verify your identity. In exceptional cases, limitations may apply (protection of the rights of others, prejudice to an investigation, etc.).

You also have the right to file a complaint with the Privacy Protection Authority.

The platform uses cookies:

• Strictly necessary: for the functioning of the website/platform (authentication, security). These cannot be refused.
• Statistical / analytics: for anonymous usage analysis (Google Analytics, etc.). These can be blocked in your browser.

If you block cookies, some of the services may not function properly.

PrimeFlow may update this policy from time to time. In the event of material changes, a notice will be published on the website and/or an alert will be sent by email. Continued use after an update constitutes consent to the new terms.

For any question, request or concern regarding privacy, you are welcome to contact us:

• Email: support@primeflow.ai
• Subject: Privacy / Request under the Protection of Privacy Law

We will respond in accordance with the law.