Privacy Policy

Flow by Plinth (“Flow”, “we”, “us” or “our”) provides an operational workspace for business centres. Questions about this policy or a privacy request can be sent to jsahu@plinth.ae.

We collect account information such as your name, work email address, authentication identifiers, organisation, role and access settings. When Google sign-in is used, we receive the basic profile information Google makes available with your permission, such as your name, email address and profile image. Flow does not receive your Google password.

Authorised workspace users may enter operational records including lead and client contact details, company information, office and building records, contracts and Ejari details, inspection records, invoices, quotations, cheques, payments, documents, activity history and internal remarks.

We may also collect technical information needed to operate and secure the service, including device and browser data, IP address, timestamps, session information, error reports and audit events.

We use information to:

• authenticate users and manage workspace access;
• provide lead, client, office, contract, Ejari, inspection, document and collection workflows;
• maintain linked operational histories and audit records;
• secure, troubleshoot and improve Flow;
• respond to support, privacy and account requests; and
• comply with applicable legal obligations.

Depending on the context, we process information to perform our agreement, pursue legitimate interests in operating and securing Flow, comply with legal obligations, or act with consent. The organisation that controls a Flow workspace is responsible for ensuring it has a lawful basis to add and use the personal information contained in its operational records.

We do not sell personal information. We may share information with service providers that help us operate Flow, including Supabase for authentication and data services, Google for optional sign-in, and Vercel for application hosting and delivery. These providers process information under their own terms and privacy commitments.

We may also disclose information when required by law, to protect the rights and security of users or the service, during a business reorganisation, or when the relevant customer or user directs us to do so.

Information may be processed in the countries where Flow and its service providers operate. We retain account and workspace information while it is needed to provide the service, meet contractual or legal obligations, resolve disputes and maintain legitimate audit records.

We use technical and organisational safeguards designed to protect information, including authenticated access and workspace permissions. No method of storage or transmission is completely secure, so absolute security cannot be guaranteed.

Subject to applicable law, you may request access, correction, deletion or restriction of your personal information, or object to certain processing. Workspace records may be controlled by your organisation; in that case we may direct the request to the relevant workspace administrator. You can disconnect Google access through your Google Account permissions and may request deletion by emailing jsahu@plinth.ae.

Flow uses essential cookies or similar storage to maintain secure sessions, remember authentication state and protect the workspace. We do not currently use the Flow workspace to serve targeted advertising.

Flow is a business service and is not directed to children. We may update this policy as the product or legal requirements change. The revised version will be posted on this page with a new update date.