Privacy Policy

This policy applies when you visit Flow, create or use a business account, work in a Flow-managed business, shop through a Flow-powered storefront, or contact us for support.

For account administration, subscriptions, security, and direct support, Flowacts as the organisation responsible for deciding how personal information is used. When a business uses Flow to manage its customers, staff, suppliers, sales, or storefront orders, that business generally decides why the information is processed and Flow processes it to provide the service. Questions about a merchant's use of your information should usually be directed to that merchant first.

• Account and identity information: name, phone number, email address, role, authentication details, assigned stores, and account status.
• Business information: business and store names, contact details, addresses, branding, tax and invoicing settings, team records, and subscription information.
• Operational records: products, barcodes, inventory, suppliers, purchases, sales, expenses, invoices, payments, refunds, credit balances, audit records, and reports.
• Storefront customer information: name, phone number, email address, delivery address, order details, delivery choices, account credentials, and order communications.
• Payment information: transaction amount, payment method, gateway reference, status, and related records. Payment providers may collect payment credentials directly; Flow generally receives the information needed to confirm and reconcile the transaction.
• Technical and security information: browser and device information, IP address where available, session identifiers, event and error logs, and activity used to protect accounts and investigate issues.
• Communications: demo requests, support messages, feedback, and other information you choose to send us.

• Provide, operate, maintain, and improve Flow and its storefront services.
• Authenticate users, manage permissions, and protect accounts.
• Process and reconcile orders, subscriptions, invoices, and payments.
• Send service, security, billing, and order-related communications.
• Provide support and respond to requests.
• Detect misuse, investigate incidents, and maintain audit records.
• Comply with legal, tax, accounting, and regulatory obligations.
• Send marketing communications where permitted and provide a way to opt out.

Depending on the context, we rely on performance of a contract, compliance with legal obligations, legitimate business interests, or consent as the basis for processing.

We may share information with:

• The business or merchant that operates the Flow account or storefront you use, including authorised staff members.
• Service providers that support hosting, communications, security, customer support, data storage, and software operations.
• Payment providers, including Paystack where enabled, and financial institutions involved in processing or verifying a payment.
• Professional advisers, regulators, courts, law-enforcement bodies, or public authorities when disclosure is legally required or necessary to protect rights and safety.
• A buyer, investor, or successor in connection with a merger, reorganisation, financing, or sale, subject to appropriate safeguards.

We do not sell personal information.

Some service providers may process information outside your country. Where this happens, we take reasonable steps to use contractual, organisational, and technical safeguards appropriate to the information and applicable law.

We retain information for as long as needed to provide the service, maintain business and transaction records, resolve disputes, enforce agreements, and meet legal, tax, accounting, fraud-prevention, and security obligations. Retention periods vary by record type. Information may remain in protected backups for a limited period after deletion from active systems.

We use administrative, technical, and organisational measures designed to protect personal information. No internet service or storage system can be guaranteed completely secure. You are responsible for protecting your credentials and promptly reporting suspected unauthorised access.

Subject to applicable law, you may request access to, correction of, or deletion of your personal information; object to or restrict certain processing; withdraw consent; or ask how your information is being used and shared. Ghana's Data Protection Act, 2012 (Act 843) provides rights including access and objection.

To make a request, email mensahben251@gmail.com. We may need to verify your identity. If your information is controlled by a Flow merchant, we may direct the request to that merchant or assist it in responding.

You may also contact Ghana's Data Protection Commission.

Flow is a business service and is not directed to children under 18. A merchant is responsible for ensuring that any information it enters into Flow is collected lawfully.

Flow uses browser storage and similar technologies for authentication, preferences, security, storefront sessions, and checkout continuity. See our Cookie Policy for details.

We may update this policy when our services or legal obligations change. We will post the revised policy with a new update date and provide additional notice when required.

Privacy questions may be sent to mensahben251@gmail.com.