Privacy Policy

Last updated:

Draft for review. This text describes how RegistryFlow is planned to operate. It must be checked against the actual business owner, payment provider, hosting arrangements and applicable law, and approved by a qualified adviser, before paid accounts open.

Who we are

RegistryFlow is operated by [business owner name and country to be confirmed].

Information we collect

  • Website enquiries: the name, email, organisation and message you send through the contact or pilot forms, plus any file you attach.
  • Account details: name, email address and workspace membership (when accounts open).
  • Workspace content: requests, correspondence, tasks, comments and documents your organisation records. Your organisation controls this content.
  • Billing: plan, payment status and invoices. Card details are held by the payment provider, not by RegistryFlow.
  • Technical data: basic logs such as IP address and browser type, used for security and to prevent abuse.

How we use it

To provide and secure the service, reply to enquiries, manage subscriptions and send service notices. We do not sell personal information and we do not show advertising.

Where it is stored

The website runs on Render, and form submissions and files are stored in Cloudflare R2 object storage. [Confirm hosting regions and any other processors before launch.]

Access to customer content

Our staff do not routinely access workspace records or documents. Any exceptional support access must be authorised by the customer, limited to what is needed and logged.

Retention and deletion

Website enquiries are kept for [period to be confirmed]. Workspace records are kept while the subscription is active and for a documented period afterwards so owners can export them. [Retention and permanent deletion rules to be confirmed and made configurable.]

Your choices

You can ask to see, correct or delete personal information we hold about you by contacting us.

Optional AI features

AI features are not currently enabled. Before any are offered, we will explain which provider is used, how confidential content is handled, and ask for your organisation’s consent.