1. Introduction
This Privacy Policy explains how information is handled when you use CafeFlow.
2. Who operates CafeFlow
CafeFlow is owned and operated by Omar Hassan Alabyadh, a Software Engineer.
3. Information we collect
Information collected depends on the features you use, including account, business, operational, contact, and payment-request information.
4. Account information
Account information includes name, email address, language preference, and authentication credentials handled through the application’s authentication system.
5. Business and staff information
Business and staff information can include business and branch details, memberships, roles, permissions, and staff invitation contact details.
6. Operational, order, and inventory information
CafeFlow processes customer-entered operational information such as catalog, supplier, inventory, recipe, order, payment, and reporting records.
7. Subscription and payment-request information
Payment requests may include selected plan, billing cycle, payment method, payer name, phone number, notes, and request status/history. CafeFlow does not collect full card numbers, CVV values, banking passwords, or banking credentials in the current subscription-request flow.
If electronic payment processing is enabled, information required to complete a transaction may also be processed by the selected payment provider. That provider’s handling of information is subject to its own privacy practices.
8. Contact and support information
The contact form collects name, email, optional phone/WhatsApp and business information, inquiry type, and message to respond to an inquiry. Contact leads are not persisted in the CafeFlow database; messages are delivered through the email service.
9. Authentication and security information
We process authentication and security information to protect accounts and the service. Security rate-limiting records use hashed identifiers rather than storing a raw contact lead in the throttle table.
10. Technical preferences, cookies, and browser storage
CafeFlow uses essential session, active-business, locale, and security cookies, plus local storage for a theme preference. CafeFlow does not currently use analytics or advertising tracking in the application.
11. How we use information
We use information to provide and operate the service, support account and business operations, respond to requests, maintain security, and meet legitimate operational or legal requirements.
12. Service providers and third parties
CafeFlow uses Vercel for application hosting and deployment, PostgreSQL database infrastructure, and Resend for email delivery. WhatsApp is a third-party service when you choose to continue there. CafeFlow may also use payment service providers, when electronic payment processing is enabled.
13. Data storage
Service information is stored in the application’s configured infrastructure as needed to provide the service.
14. Data retention
CafeFlow may retain information for as long as needed to provide and operate the service, support account and business operations, maintain security, resolve disputes, and comply with legitimate legal or operational requirements. Technical security records may follow their existing bounded expiry.
15. Security
We use technical and organizational measures intended to protect the service and account information. No online service can guarantee absolute security.
16. Access, correction, and copy requests
Contact CafeFlow with questions or requests relating to your information, including access, correction, or obtaining a copy where reasonably supported. Requests may require verification.
17. Deletion requests
There is no automated public deletion workflow. You may contact CafeFlow to request deletion of applicable account or business information. Requests are reviewed manually and information may be retained where reasonably required for operational, security, dispute, fraud-prevention, or legal purposes.
18. WhatsApp communications
The WhatsApp Lead Composer runs in the browser and CafeFlow does not persist its lead values in the CafeFlow database. You choose whether to continue to WhatsApp; after doing so, handling is also subject to the external service’s practices.
19. Changes to this Privacy Policy
We may update this Policy when the service or applicable requirements change.
20. Contact information
Contact CafeFlow through the public contact page or approved phone and WhatsApp channels.
Questions about this Privacy Policy?
Use the CafeFlow contact channels for privacy or information requests.