Privacy Policy

01 Who Operates Flowwrk

Flowwrk is operated by:

02 Scope of This Policy

This Privacy Policy applies to information processed through:

• flowwrk.co
• Flowwrk's discovery-call scheduling page
• embedded automation demonstrations
• website inquiry and booking forms
• discovery calls and related recordings
• communications connected to an inquiry or potential project
• Flowwrk's prospect and client-management systems

This policy does not control how unrelated third-party websites process information after you leave Flowwrk.

03 Information You Provide

Contact and booking information

When you schedule a discovery call, we may collect:

• your name
• your email address
• email addresses of guests you invite
• your selected appointment date and time
• your time zone
• calendar and video-meeting information

Business and project information

The booking form may ask for:

• your website or business URL
• information about your business
• the type of automation or systems help you need
• your current operational challenges
• the software and tools you currently use
• your preferred implementation timeline
• your estimated implementation budget
• additional information you choose to provide

Some fields allow free-text responses. Please provide only the information needed for us to understand your inquiry. Do not submit passwords, authentication codes, API keys, payment-card information, confidential client records, health information, government identification numbers, or other sensitive information through the booking form.

Information about other people

If you provide another person's email address as a guest, you confirm that you have permission to provide it for the purpose of inviting that person to the call.

Client intake information

If you decide to work with Flowwrk, we may collect additional information through a separate client intake process. This may include:

• legal or business name
• business contact information
• billing and contract details
• project requirements
• workflow information
• account or platform details needed for the project
• team-member contact information
• preferences and project instructions

We will request only the information reasonably needed to evaluate, set up, and deliver the agreed services.

Communications

If you contact us directly, we may collect your contact details and the contents of your message, including any information you voluntarily provide.

04 Information Collected Automatically

When you visit the website or interact with an embedded service, we and our service providers may automatically process:

• IP address
• browser type and settings
• device type
• operating system
• referring page or website
• pages and videos viewed
• date and time of access
• URL parameters
• approximate location derived from an IP address
• page-loading and performance information
• error, security, and diagnostic information
• interactions with embedded videos, scheduling tools, or testimonials
• cookies and similar technical identifiers

The information available directly to Flowwrk may be more limited than the information processed by each service provider.

05 Discovery-Call Recordings

With your permission, we may record discovery calls conducted through Google Meet. A recording may include:

• your name
• your voice and video
• screen shares
• meeting chat
• captions or transcripts
• business and project information discussed during the call

We may use these recordings to:

• review your requirements
• prepare recommendations or proposals
• document potential workflows and automation opportunities
• confirm agreed next steps
• reduce the need to request the same information again

We will notify you and request your consent before recording begins. You may decline recording and continue participating in the call.

Recordings involving prospects who do not become clients will be deleted within 90 days after the call. If you become a client, relevant recordings may be retained throughout the project and deleted within 90 days after the project ends, unless a longer period is reasonably necessary to address a dispute, legal obligation, or specific request from you.

Recordings are stored through Google Workspace and are limited to authorized persons who need them for the purposes described above. We will not publish or use a call recording for a testimonial, training material, marketing content, case study, or public demonstration without obtaining separate permission.

06 How We Use Information

We may use personal information to:

• respond to inquiries
• evaluate whether our services fit your needs
• prepare for and conduct discovery calls
• schedule appointments
• create Google Calendar events and Google Meet invitations
• send booking confirmations and reminders
• create and maintain a prospect record in Airtable
• organize and automate the prospect and client journey
• prepare proposals, recommendations, and next steps
• communicate about services you requested
• deliver contracted services
• manage onboarding, project delivery, support, and offboarding
• maintain business and communication records
• operate, secure, and troubleshoot the website
• detect spam, fraud, abuse, and technical problems
• understand general website usage and performance
• comply with legal obligations
• establish, exercise, or defend legal claims

We do not use information collected through the website to make decisions that produce legal or similarly significant effects through a solely automated process.

07 CRM and Automation Processing

After you submit the discovery-call form, the information you provide may be transferred to Airtable to create or update a prospect record. The Airtable record may contain:

• your contact details
• business information
• discovery-call responses
• appointment information
• project interests
• budget and timeline information
• notes and follow-up status
• information created during later stages of the client journey

We use this record to prepare for your call, track communication, manage follow-ups, prevent duplicate records, and move the inquiry through the appropriate prospect or client process.

We use n8n, a workflow automation platform, to transmit information between NeetoCal, Airtable, Google Workspace, and other systems used for the client journey. We limit these integrations to information reasonably necessary for the relevant workflow.

08 Service and Marketing Communications

Scheduling a discovery call does not automatically add you to a marketing email list.

We may send service-related communications connected to:

• your inquiry
• your scheduled call
• a proposal
• client intake
• a contract
• project onboarding
• service delivery
• invoices or payments
• support
• project completion or offboarding

These messages are necessary to respond to your request or provide services.

If you separately choose to receive marketing communications, we may send occasional information about Flowwrk services, automation tips, updates, or relevant offers. You may unsubscribe from marketing emails at any time using the unsubscribe link in the email or by contacting support@flowwrk.co. Choosing not to receive marketing emails will not affect service-related communications.

09 Legal Bases for Processing

Where the GDPR, UK GDPR, or a similar law applies, we rely on one or more of the following legal bases.

Steps requested before entering a contract

We process information to respond to your inquiry, evaluate a potential project, schedule a call, and discuss a possible engagement.

Performance of a contract

If you become a client, we process information needed to provide the services described in our agreement.

Legitimate interests

We may process information when reasonably necessary to:

• operate and protect the website
• respond to business inquiries
• manage prospects and client relationships
• document requirements and communications
• improve our services and workflows
• prevent fraud and misuse
• maintain appropriate business records

Legal obligations

We may process or retain information when required to comply with applicable law, regulation, legal process, or enforceable governmental request.

Consent

We rely on consent when:

• recording a discovery call
• sending optional marketing communications where consent is required
• loading optional third-party media or technologies where consent is required
• using information for another purpose that requires your permission

You may withdraw consent at any time. Withdrawal does not affect processing that occurred before consent was withdrawn.

10 Cookies and Similar Technologies

Flowwrk and its service providers may use cookies, embedded scripts, and similar technologies. These technologies may support:

• website security and network delivery
• appointment scheduling
• embedded video functionality
• visitor preferences
• performance measurement
• testimonial display
• fraud and abuse prevention

We use Google Analytics (via Google's gtag.js) to measure website performance and general usage. Google Analytics uses cookies and similar identifiers and, where required, is not loaded until you provide Analytics consent through our cookie consent tool.

We also use Cloudflare for website delivery and security. If Cloudflare Web Analytics is separately enabled on this site, it is designed by Cloudflare not to access cookies, local storage, IP addresses, or other browser storage; we treat it the same as our other analytics technology in the cookie consent tool out of caution.

NeetoCal may use session cookies and similar technologies when you access its scheduling service. NeetoRecord demonstration videos and the Senja testimonial widget are not requested from their respective providers until you grant Media and Embedded Content consent through our cookie consent tool (or click directly on an individual video's "Enable Media and Play" prompt). Once loaded, those services may receive technical and usage information and may store cookies or similar identifiers.

You may block or delete cookies through your browser settings, and you can review or change your cookie choices at any time using the "Cookie Preferences" link in the website footer. Doing either may prevent videos, scheduling features, or other parts of the website from functioning properly.

Where applicable law requires consent for non-essential cookies or similar technologies — including for visitors in the European Economic Area, the United Kingdom, and Switzerland — we request consent before loading them, and we honor the Global Privacy Control signal by keeping optional categories off until you choose otherwise.

11 Service Providers and Information Sharing

We may disclose information to service providers that help us operate Flowwrk.

Cloudflare

Cloudflare provides website delivery, security, asset delivery, and technical infrastructure, and may provide website performance analytics.

Google Analytics

Google Analytics helps us understand website performance and general usage. It is loaded only after you provide Analytics consent, or automatically in regions where prior consent is not required and you have not opted out.

NeetoCal

NeetoCal provides appointment scheduling. It processes booking details, intake-form responses, selected appointment information, confirmation and reminder communications, and related technical data.

NeetoRecord

NeetoRecord hosts and displays recorded automation demonstrations. When loaded, it may process video-viewing activity, technical logs, cookies, and related usage data. NeetoRecord displays prerecorded demonstrations. Watching a demonstration does not activate your camera or microphone.

Airtable

Airtable is used as a CRM and operational database for prospect and client records.

Google Workspace

Google services may be used to:

• load website fonts
• receive business communications
• create calendar invitations
• conduct calls through Google Meet
• store authorized call recordings
• manage related files and business records

Senja

Senja provides testimonial-display functionality and may process usage data or technical identifiers when its widget loads.

n8n

n8n is our automation and integration provider. We use it to transfer information between NeetoCal, Airtable, Google Workspace, and other systems used in the prospect or client journey. n8n processes information according to our configuration and its own privacy notice.

We may also disclose information:

• when required by law or valid legal process
• to investigate fraud, security incidents, or misuse
• to protect our rights, property, users, or others
• in connection with a merger, acquisition, restructuring, financing, or sale of business assets
• when you direct or authorize us to do so

We do not sell personal information. We do not share personal information for cross-context behavioral advertising or use it for targeted advertising.

12 International Data Transfers

Her Funnels LLC is based in the United States. Your information may be transferred to, stored in, or processed in the United States and other countries where our service providers operate. Privacy protections in those countries may differ from those in your location.

Where applicable law requires additional safeguards, we will take reasonable steps to use an approved transfer mechanism or work with providers that offer appropriate contractual safeguards.

13 Data Retention

We use the following general retention periods:

• Unqualified or inactive discovery inquiries are deleted or anonymized after 12 months.
• Prospect call recordings are deleted within 90 days after the call.
• If a prospect becomes a client, relevant call recordings may be retained during the project and for up to 90 days after the project ends.
• Active prospect information may be retained while discussions remain ongoing.
• Client information may be retained for the duration of the engagement and afterward when reasonably necessary for contracts, support, accounting, tax, dispute resolution, or legal obligations.
• Marketing information is retained until you unsubscribe, withdraw consent, or the information is no longer needed.

Information may remain in secure backups or with service providers for a limited period after deletion from active systems.

14 Data Security

We use reasonable administrative, technical, and organizational safeguards intended to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure. These measures may include restricted access, secure service providers, encryption in transit, account-security controls, and website-security services.

No website, transmission method, or storage system can be guaranteed to be completely secure.

15 Your Privacy Rights

Depending on where you live and which laws apply, you may have the right to:

• request access to personal information we hold about you
• request correction of inaccurate information
• request deletion of your information
• receive a portable copy of certain information
• restrict certain processing
• object to processing based on legitimate interests
• withdraw consent
• opt out of certain sales, sharing, profiling, or targeted advertising
• appeal the denial of a privacy request
• receive equal service when exercising your privacy rights

To submit a request, contact support@flowwrk.co. We may need to verify your identity before completing a request. Certain information may be retained or excluded from a request where permitted by law.

16 EEA and UK Privacy Rights

Where the GDPR or UK GDPR applies, you may have rights to:

• access your personal information
• correct inaccurate or incomplete information
• request deletion
• restrict processing
• object to processing
• receive certain information in a portable format
• withdraw consent
• lodge a complaint with your local data protection authority

We encourage you to contact us first so we can try to address your concern.

17 California and Other US State Rights

Residents of California and certain other US states may have additional rights under applicable state privacy laws. The availability of these rights depends on the applicable law, the nature of the information, and whether relevant legal requirements and business thresholds apply to Her Funnels LLC.

Where legally required, we will recognize valid browser-based opt-out signals, including Global Privacy Control. Flowwrk does not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising.

Flowwrk does not currently alter its ordinary website operation in response to a Do Not Track signal. Third-party providers may respond according to their own policies.

18 Children's Privacy

Flowwrk provides business services and is intended for adults. The website is not directed to children under 18, and we do not knowingly collect personal information from children under 13. If you believe a child has submitted personal information, contact support@flowwrk.co so we can review and, where appropriate, delete it.

19 Sensitive Information

We do not intentionally request sensitive personal information through the website or discovery-call form. Information entered into free-text fields may be processed as part of your submission. Please avoid including sensitive, confidential, or regulated information that is unnecessary for your inquiry.

We do not use sensitive personal information to infer characteristics about visitors.

20 Third-Party Websites and Services

The website may contain links to third-party websites, professional profiles, videos, scheduling services, or documents. When you visit or load a third-party service, that provider's privacy practices apply. We do not control the privacy or security practices of unaffiliated third parties.

21 Changes to This Policy

We may update this Privacy Policy when our website, services, providers, or legal obligations change. The "Last Updated" date will show when the policy was most recently revised. Where required, we will provide additional notice of material changes.

22 Contact Us

For questions, concerns, or privacy requests, contact: