Privacy Policy

1. Introduction & Data Controller

SupportFlow AI ("SupportFlow", "we", "us", or "our") operates the website located at https://supportflow.ca and provides automated 24/7 AI conversational concierge and lead capture software for businesses. We are dedicated to maintaining the confidentiality, integrity, and security of all personal and business data processed through our platform.

If you have questions regarding this Privacy Policy or wish to exercise data rights, our dedicated customer support team can be contacted directly at: supportflowai81@gmail.com.

2. Information We Collect

We collect information necessary to operate, improve, and secure our AI customer support infrastructure:

• Account & Registration Details: When you subscribe, request a consultation, or complete onboarding, we collect your name, business email address, company or clinic name, phone number, and website URL.
• Customer Support & Chat Interactions: When visitors communicate with the SupportFlow AI widget deployed on client websites, we log chat message transcripts, timestamps, inquiry topics, and contact details voluntarily submitted by visitors (such as name, phone number, or email for appointment requests).
• Training & Knowledge Base Documents: Business subscribers upload service catalogs, FAQ sheets, and pricing guides to calibrate their AI agent's vector knowledge base.
• Technical & Telemetry Data: Browser user-agent strings, IP addresses (anonymized where required), referring URLs, and performance metrics collected via our edge network for security, fraud prevention, and uptime monitoring.

3. How We Use Your Information

All data collected is utilized strictly for legitimate business and operational purposes:

• To power 24/7 AI conversation answering, lead qualification, and customer concierge workflows.
• To generate private high-dimensional vector embeddings for accurate semantic knowledge retrieval.
• To dispatch instant email notifications and appointment lead alerts to business owners and clinic managers.
• To process billing, invoices, and subscription payments through our authorized Merchant of Record.
• To comply with legal obligations, prevent spam, and enforce our Acceptable Use Policy.

4. Third-Party Service Providers & Processors

We partner with industry-leading infrastructure providers to deliver high-availability, compliant services:

• Creem.io (Merchant of Record & Payments): Payment transactions, tax compliance (VAT/GST/Sales Tax), and subscription billing are processed securely through Creem. Payment card details are handled in accordance with PCI-DSS standards and are never stored on SupportFlow servers.
• Cloudflare Inc. (Global Edge Network & Hosting): Delivers edge worker execution, SSL/TLS encryption, and DDoS mitigation.
• Supabase / PostgreSQL (Isolated Data Storage): Stores knowledge chunks and chat logs with Row-Level Security (RLS) and AES-256 encryption at rest.
• Resend (Transactional Email Delivery): Dispatches automated lead alerts and onboarding notifications.

5. Data Security & Storage

We enforce robust administrative, technical, and physical safeguards to protect information against unauthorized access, loss, or alteration. All data in transit is encrypted using modern TLS 1.3 encryption, and databases are protected by multi-tenant authentication barriers.

6. Your Data Rights (GDPR, CCPA & Global Rights)

Depending on your jurisdiction, you have the right to access, inspect, export, correct, or request the permanent deletion of personal information held by SupportFlow. To make a data request, please email our support desk at supportflowai81@gmail.com with the subject line "Data Privacy Request". We respond to all verified requests within 30 days.

7. Contact Customer Support

For any privacy inquiries, questions regarding our Merchant of Record checkout, or technical assistance:

SupportFlow AI Customer Support
Email: supportflowai81@gmail.com
Website: https://supportflow.ca
Hours: 24/7 Automated Intake • Human Review within 24 Hours