Privacy Policy
Effective Date: January 12, 2026
1. Introduction
CREflow ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cloud-based CRM platform designed for commercial real estate professionals.
2. Information We Collect
Personal Information
- Name, email address, and phone number
- Company name and job title
- Billing and payment information
- Profile photo (if provided)
Business Data
- Contacts, leads, and deal information you enter into CREflow
- Property records and related documents
- Campaign data and activity logs
- Notes, comments, and communications within the platform
Automatically Collected Information
- IP address and browser type
- Device information and operating system
- Usage analytics (pages visited, features used, session duration)
- Cookies and similar tracking technologies
3. How We Use Your Information
- To provide, maintain, and improve CREflow services
- To process transactions and manage your subscription
- To send service-related communications and support responses
- To personalize your experience and provide relevant features
- To monitor usage patterns and optimize performance
- To detect, prevent, and address security issues
- To comply with legal obligations
Marketing communications
We send promotional emails (such as product news, tips, and offers) only if you opt in. You can opt in or out when you sign up, when you complete setup for an invited account, or at any time in your account Settings. Service-related messages—such as account, billing, security, team, and in-product activity notifications—may be sent as needed to operate CREflow and are separate from marketing opt-in.
4. Data Sharing and Disclosure
We do not sell your personal or business data. We may share information with:
- Service Providers: Third-party vendors who assist in operating our platform (e.g., payment processors, hosting providers)
- Team Members: Other users within your organization's CREflow account, as configured by your team settings
- Legal Requirements: When required by law, court order, or governmental authority
- Business Transfers: In connection with a merger, acquisition, or sale of assets
5. Data Security
We implement industry-standard security measures to protect your data, including:
- Encryption of data in transit and at rest
- Regular security audits and vulnerability assessments
- Role-based access controls
- Secure data centers with physical and network protections
6. Data Retention
We retain your data for as long as your account is active or as needed to provide services. Upon account cancellation, we offer a data export period before permanent deletion. Some data may be retained as required by law or for legitimate business purposes.
7. Your Rights
You have the right to:
- Access, correct, or delete your personal information
- Export your data in a portable format
- Opt out of marketing communications at any time via Settings (this does not disable essential service emails)
- Restrict or object to certain data processing activities
- Withdraw consent where processing is based on consent
8. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us through our support channels or at our Contact page.