Privacy Policy

Handlflow ("we", "us") designs, builds and manages websites, connected workflows and custom business systems for small businesses. This policy explains what information we collect, why, and how we protect it. We build systems that record consent, preserve customer choice, and never expose private client data publicly.

We use information to operate your automations, route leads, schedule appointments, provide the client portal, communicate with you, and improve our services. We do not sell your data.

Client data is isolated by business. Users may only access records belonging to their authenticated business. Agency administrators may access all workspaces for support and operations. Public users cannot access private client records under any circumstance.

For any customer-facing automation, we record the consent source, date, and status. We support opt-out requests, allow automation to be paused, and clearly identify the business sending a message. We do not send unsupported marketing messages.

We implement authentication, role-based access, multi-tenant record separation, server-side actions, audit logs, validated inputs, and secure secret storage. API keys are never exposed in the browser.

Client data is retained for the duration of your engagement and may be deleted upon request, subject to legal or contractual obligations.

You may request access to, correction of, or deletion of your personal data by contacting us. You may opt out of automated communications at any time.

We may update this policy. Material changes will be communicated to active clients.

For privacy questions or data requests, contact us at steven@handlflow.com.