1. Introduction

Ashflow ("we", "us", or "our") operates ashflow.site. This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our website and services, as well as the choices you have associated with that data.

2. Information We Collect

We collect several different types of information for various purposes to provide and improve our service to you:

• Personal Contact Data: Name, business email address, phone number, company name, and project specifications provided voluntarily via contact or audit forms.
• Usage Data: Anonymized analytical data including page visit counts, browser types, referrer pages, and device information.
• Interactive Submissions: Sentence submissions left voluntarily on "The Manifest" community wall.

3. How We Use Your Data

Ashflow uses collected data for the following purposes:

• To deliver requested digital growth audits, system proposals, and consultation bookings.
• To respond to inquiries initiated through our website or AI assistant.
• To secure our infrastructure and prevent unauthorized access or automated spam.
• To maintain internal records and analyze website performance.

4. Data Sharing & Third-Party Processors

We do not sell, rent, or trade your personal data to third parties. We share data only with verified service providers necessary to operate our business infrastructure under strict confidentiality agreements:

• Communication Services: Resend (transactional email delivery).
• Database Infrastructure: Supabase (secure cloud database storage).
• Automation Workflows: n8n / Heroku (webhook routing for CRM processing).
• Analytics: Vercel Analytics (privacy-focused, anonymized web metrics).

5. Your GDPR & CCPA Rights

Depending on your location, you hold the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data from our records.
• Right to Opt-Out: Request that your data not be used for marketing communications.

To exercise any of these rights, contact us at hello@ashflow.site.

6. Security

We enforce HTTPS encryption, strict content security policies, and rate-limiting across all form endpoints to safeguard your personal data.

7. Contact Us

If you have any questions about this Privacy Policy, please reach out to us:

Email: hello@ashflow.site
Website: https://ashflow.site