Privacy Policy

1. Who we are

TeamFlow is an online workspace for agencies and teams: tasks, projects, calendar, CRM and a shared inbox for social media messages. It is available at www.teamflowua.com.

For any data-related questions, contact teamflow.company@gmail.com.

2. Data we collect

• Account data: name, email, password (stored only as a hash), profile photo. If you sign in with Google, we receive your name, email and photo from your Google account.
• Optional profile data you add: phone, Telegram handle, job title, department, birthday, bio, status.
• Work data you or your team enter: projects, tasks, events, file links, clients, contacts, deals, notes, project finances.
• Messages from connected channels: when a workspace admin connects a Facebook Page, Instagram account, Telegram bot or WhatsApp number, we receive incoming messages, the sender's name and ID, and lead form submissions.
• Google data, only if you connect the related service yourself (see section 4).
• Technical data: a session cookie for sign-in, interface preferences in your browser, hosting request logs (IP address, time, page URL).

3. How we use data

• to provide the service: show your team its projects, tasks, CRM and messages;
• to send your replies to customers through connected channels on behalf of your Page or bot;
• to sync your calendar and show the files and emails you have allowed;
• to keep the service secure, fix errors and answer your requests.

We do not sell data, do not show ads, and do not use your data to train AI models.

4. Google user data

Google services are connected separately under “Integrations”, and only with your explicit consent. We request:

• Google Calendar (calendar.events): read and create events, to show your calendar in TeamFlow and add TeamFlow meetings to it;
• Google Drive (drive.file): access only to the files and folders you pick in the Google window, so you can share links to them with your team. If you choose so when adding them, TeamFlow shares these files with your workspace members or by link. We cannot see the rest of your Drive and never modify or delete file contents.
• TeamFlow does not request access to your Gmail.

Google data is used only for these features and is visible only to you and your team inside your workspace. We do not transfer it to third parties except as needed to provide the feature, to comply with law, or for security. No human reads this data unless you ask us to, or it is required for security or legal reasons.

TeamFlow's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke access at any time with the “Disconnect” button in TeamFlow or at myaccount.google.com/permissions.

5. Meta data (Facebook, Instagram, WhatsApp)

When an admin connects a Page or account, we receive a Page access token, incoming messages, lead form submissions and the sender's public name. This data is used only to show messages to your team, create a CRM deal and send your reply. We do not use it for advertising and do not share it with third parties.

You can disconnect the integration in TeamFlow or in Facebook: Settings & privacy → Business integrations.

6. Storage and security

Data is stored in a Supabase database; the website runs on Vercel. All connections are encrypted (HTTPS/TLS). Database-level access rules ensure each user sees only the workspaces they belong to, according to their role. Integration tokens are stored separately, are accessible only to the server and never reach the browser.

7. Who we share data with

Only with providers required to run the service, and only as needed:

• Supabase — database and authentication;
• Vercel — website hosting;
• Resend — sending support emails;
• Google, Meta, Telegram — only when you connect them, to receive and send data on your behalf.

We may disclose data if required by law.

8. Retention

We keep data while your account or workspace exists. When you delete your account, your personal data and Google connections are removed immediately; workspace data is removed together with the workspace. Infrastructure backups are overwritten within 30 days. Hosting logs are kept for a limited time according to Vercel's settings.

9. Your rights

You can view and correct your data in profile settings, revoke Google or Meta access, delete your account (Settings → Profile → Delete account), or email us to get a copy of your data or have it deleted. See the Data Deletion page for details.

If you are a client of an agency that uses TeamFlow and the agency entered your data, please contact the agency first, as it decides what to keep. We will help if you write to us.

10. Cookies

We use only essential cookies for sign-in and your browser's local storage for interface preferences (theme, widget layout). There are no advertising or analytics trackers.

11. Children

TeamFlow is a work tool and is not intended for people under 16.

12. Changes

We will notify you about significant changes in the app or by email. The date of the last update is shown at the top of this page.

13. Contact

Email: teamflow.company@gmail.com