Privacy Policy

How we collect, use, and protect your information

Last Updated: April 28, 2025

At Flowly ("we", "our", or "us"), we are committed to protecting your privacy and the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and services (collectively, the "Services").

We operate in Canada and the United States and comply with applicable privacy laws in these jurisdictions, including the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada and various state and federal laws in the United States.

Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

We collect several types of information from and about users of our Services:

We collect personal information that you voluntarily provide to us when you register for an account, express interest in obtaining information about us or our products and services, or otherwise contact us. This information may include:

  • Name (first and last)
  • Email address
  • Phone number
  • Business name and information
  • Mailing address
  • Password (for account access)

As a financial services platform, we collect information related to your business operations and finances, including:

  • Invoice data and documentation
  • Work completion evidence
  • Client information
  • Banking information (for payment processing)

When you use our Services, we automatically collect certain information about your device and usage patterns. This may include:

  • IP address
  • Device type and operating system
  • Browser type and settings
  • Usage data (pages visited, features used, time spent)
  • Location data (if permitted by your device settings)

We use the information we collect for various business and commercial purposes, including:

  • Creating and managing your account
  • Processing and verifying invoices
  • Facilitating early payment transactions
  • Improving and optimizing our platform
  • Developing new features and services
  • Responding to your inquiries and support requests
  • Sending service-related notifications
  • Providing updates about your account or transactions
  • Sending marketing communications (with your consent)
  • Protecting against fraudulent or unauthorized activity
  • Verifying your identity
  • Complying with legal obligations
  • Enforcing our terms of service

We may share your information with the following categories of third parties:

We share verified invoice information with our factoring partners to facilitate early payment funding. This includes invoice details, verification results, and business information necessary to complete the transaction.

We engage trusted third-party companies and individuals to facilitate our Services, provide services on our behalf, perform service-related functions, or assist us in analyzing how our Services are used. These may include:

  • Payment processors
  • Cloud storage providers
  • Analytics services
  • Customer support tools
  • Marketing and communication platforms

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency). We may also disclose your information to:

  • Enforce our rights arising from contracts
  • Protect and defend our rights or property
  • Prevent or investigate possible wrongdoing
  • Protect the personal safety of users or the public

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your information.

We implement appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.

Our security measures include:

  • Encryption of sensitive data in transit and at rest
  • Regular security assessments and penetration testing
  • Access controls and authentication requirements
  • Monitoring for suspicious activities
  • Employee training on data security practices

As we operate in both Canada and the United States, your information may be transferred to, stored, and processed in either country. By using our Services, you consent to the transfer of information to countries outside your country of residence, including the United States, which may have different data protection rules than those of your country.

We take appropriate measures to ensure that any such transfers comply with applicable data protection laws and that your information remains protected to the standards described in this Privacy Policy.

Depending on your location, you may have certain rights regarding your personal information:

Under PIPEDA, you have the right to:

  • Access your personal information
  • Correct inaccurate or incomplete information
  • Withdraw consent for certain processing activities
  • File a complaint with the Privacy Commissioner of Canada

Depending on your state of residence, you may have rights to:

  • Request access to your personal information
  • Request deletion of your personal information
  • Opt-out of the sale of your personal information
  • Non-discrimination for exercising your privacy rights

To exercise your privacy rights, please contact us using the information provided in the "Contact Us" section below. We will respond to your request within the timeframe required by applicable law.

We use cookies and similar tracking technologies to track activity on our Services and store certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier.

We use the following types of cookies:

  • Essential cookies: Necessary for the operation of our website
  • Analytical/performance cookies: Allow us to recognize and count visitors and see how they move around our website
  • Functionality cookies: Enable us to personalize content for you
  • Targeting cookies: Record your visit to our website, the pages you visit, and the links you follow

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Services.

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will take steps to delete such information.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: privacy@getflowly.ca

Address: Canada

Phone: +1 (403) 555-0123