Who we are
Flowzora is a workflow automation consultant operating under oneProductLab. For anything in this policy, contact info@flowzora.com.
What we collect
Contact form submissions. If you use the contact form we receive your name, email address, company name, an approximate team size, and whatever you write in the message field. You choose all of it. We ask for nothing else and there are no hidden fields beyond a spam honeypot, which is never read as personal data.
Analytics. We use Vercel Analytics and Vercel Speed Insights. Both are cookieless and do not fingerprint visitors or build cross-site profiles. They report aggregate page views and performance timings. We cannot identify you from them, and neither can we tie a page view to a contact form submission.
Server logs. Our host records standard request logs, including IP addresses, as part of operating the site. The contact endpoint also holds an IP address in memory briefly to rate-limit submissions. It is not written to a database and does not survive a restart.
What we do not do
- We set no advertising or tracking cookies.
- We do not sell, rent or share your data with advertisers.
- We do not run remarketing or ad-network pixels.
- We do not add you to a mailing list because you filled in the form.
Who processes your data
We keep the list short deliberately — every processor is somewhere your data could go, so we use as few as the site needs.
- Vercel — hosting, serverless functions, analytics.
- Resend — delivers contact form submissions to our inbox.
- Google Workspace — where that email is then received and stored.
These providers operate internationally, so your data may be processed outside your own country, including in the United States.
Why we are allowed to hold it
Contact form data is processed on the basis of legitimate interest: you asked us about work, and answering requires holding what you sent long enough to reply. Analytics is aggregate and cookieless, so it does not rely on consent under GDPR or ePrivacy.
How long we keep it
Inquiries stay in our email for as long as the conversation is live and for up to 24 months afterwards, so we can pick up a thread you left open. Ask us to delete it sooner and we will. Records tied to paid work are kept for as long as accounting rules require.
Your rights
Depending on where you live you can ask for a copy of what we hold, ask us to correct it, ask us to delete it, or object to us holding it at all. Email info@flowzora.com and we will action it within 30 days. You do not need to explain why, and asking will not affect any live conversation.
If you are in the UK or EU and think we have handled this badly, you can complain to your national data protection authority.
Client systems we build
This policy covers this website only. When we build automation for a client, that client remains the data controller for anything flowing through it; we act as a processor under the terms of that engagement, and credentials and infrastructure sit in the client’s own accounts.
Changes
If this policy changes materially we update the date at the top. We do not backdate it to look freshly maintained.