Your privacy, protected.
Overview
FlowRouter, Inc. (“FlowRouter,” “we,” “our,” or “us”) provides a visual lead-routing platform for HubSpot teams. This Privacy Policy explains what information we collect, how we use it, when we share it, and what choices you have.
By accessing or using FlowRouter's platform, APIs, or any associated services (collectively, the “Service”), you agree to this Privacy Policy. If you do not agree, please discontinue use of the Service.
The short version: We collect information necessary to operate and improve FlowRouter. We do not sell your personal data to third parties. We take security seriously and give you control over your information.
Information We Collect
We collect information in three ways: information you provide, information we collect automatically, and information from third parties.
How We Use Information
We use the information we collect for the following purposes:
- Delivering the Service: Provisioning accounts, executing routing flows, processing HubSpot API requests, and providing core platform functionality.
- Improving Performance: Analyzing aggregated routing metrics to optimize matching accuracy, reduce latency, and enhance reliability.
- Billing & Payments: Processing transactions, managing subscriptions, and sending invoices and payment confirmations.
- Customer Support: Responding to inquiries, diagnosing issues, and providing technical assistance.
- Security & Fraud Prevention: Detecting anomalous activity, preventing unauthorized access, and protecting the integrity of our infrastructure.
- Communications: Sending product updates, security notices, and policy changes. You may opt out of marketing communications at any time.
- Legal Compliance: Meeting obligations under applicable law, including responding to lawful requests from governmental authorities.
Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:
Account data is retained for the duration of your account and for up to 90 days following account deletion, after which it is purged from our systems. Routing and usage logs are retained for up to 12 months to support performance analysis, debugging, and billing reconciliation. Billing records are retained for a minimum of 7 years as required by applicable tax and financial regulations.
When you cancel your subscription, you will have a 30-day access window during which you can export your flow configurations and routing history. After 30 days, your data is permanently deleted.
Security
We implement industry-standard technical and organizational safeguards to protect your information, including TLS encryption in transit, AES-256 encryption at rest, role-based access controls, regular third-party penetration testing, and SOC 2 Type II compliance.
No method of transmission over the Internet is completely secure. While we use commercially reasonable measures to protect your data, we cannot guarantee absolute security. In the event of a data breach affecting your information, we will notify you in accordance with applicable law.
To report a potential security vulnerability, contact our security team at security@flowrouter.io. We operate a responsible disclosure program and will respond within 48 hours.
Your Rights
Depending on your location, you may have the following rights regarding your personal data. To exercise any of these rights, contact us at privacy@flowrouter.io. We will respond within 30 days.
Children's Privacy
FlowRouter is designed for use by businesses. Our Service is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at privacy@flowrouter.io and we will take prompt steps to delete such information.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email and a prominent notice in the application at least 30 days before the changes take effect. The “Last updated” date at the top of this policy reflects the most recent revision.
Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated policy.
Contact Us
If you have questions, concerns, or requests related to this Privacy Policy or our data practices, please reach out to us.