Privacy Policy

1. Information we collect

We collect account information such as name and email, project and deliverable data you upload, contract and approval records, and billing metadata required to run paid features.

2. How we use information

We use your data to authenticate access, provide project collaboration features, process billing events, maintain security, and improve service reliability.

3. Processors and infrastructure

Okraflow uses trusted third parties for core service operation, including Stripe for payments, Cloudflare R2 for file storage, and email providers for transactional messages.

4. Data sharing

We do not sell personal data. We only share data with service providers needed to operate Okraflow, when required by law, or when you explicitly request integrations or exports.

5. Retention and deletion

We retain data while your account is active and as needed for security, fraud prevention, legal obligations, and legitimate business records.

If you need account data deletion assistance, contact support through the contact page.

6. Security

We apply technical and organizational safeguards to protect data, including authenticated access controls, private storage, and signed file access links.

7. Policy changes

We may update this policy as the platform evolves. Material updates will be reflected by a new "Last updated" date.