1. INTRODUCTION
Coreflow ("we", "us", "our") is committed to protecting your privacy. This privacy policy explains what personal information we collect, how we use it, and your rights in relation to it. This policy applies to all users of the Coreflow platform and website.By using our service, you agree to the collection and use of information as described in this policy.
2. INFORMATION WE COLLECT
We collect the following categories of information:
Account information: Name, email address, job title, company name, and password when you register for an account.
Usage data: Information about how you use the platform, including pages visited, features used, actions taken, and session duration.
Device and technical data: IP address, browser type and version, operating system, time zone, and device identifiers.
Communications: Any messages you send us via email or support channels.
User-generated content: Data you input into Coreflow, including candidate records, client information, notes, and pipeline data. You are responsible for the legality of this data.
Payment information: We do not store payment crd details. Billing is handled by Stripe, our third-party payment processor. Please refer to Stripe's privacy policy for details on how they handle your payment data.
3. HOW WE COLLECT INFORMATION
We collect information in the following ways:
Directly from you when you create an account, use the service, or contact us.
Automatically through cookies, log files, and similar tracking technologies when you interact with our platform.
From third-party services we use to operate the platform (see section 6).
4. HOW WE USE YOUR INFORMATION
We use the information we collect to:
Provide, operate, and improve the Coreflow service.
Create and manage your account.
Process billing and manage your subscription.
Respond to your support requests and communications.
Send you service related notifications, such as account confirmations, billing updates, and security alerts.
Send you product updates or promotional emails where you have opted in to receive them.
Monitor usage patterns to improve performance, security, and features.
Comply with legal obligations.
We do not sell your personal information to third parties.
5. COOKIES AND TRACKING
We use cookies and similar technologies to operate our service. These include:
Essential cookies: Required for the platform to function, including session management and authentication.
Analytics cookies: Used to understand how users interact with the service so we can improve it.
Preference cookies: Used to remember your settings and preferences.You can control cookie settings through your browser. Disabling essential cookies may prevent certain features from working correctly.
6. THIRD-PARTY SERVICES
We use trusted third-party services to help operate Coreflow. These providers may process your data on our behalf under strict confidentiality obligations. Categories of third-party providers include:
Cloud hosting and infrastructure providers.
Payment processing (Stripe).
Analytics and monitoring tools.
Customer support and communication platforms.
We do not share your personal data with third parties for their own marketing purposes.
7. DATA RETENTION
We retain your personal information for as long as your account is active or as necessary to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. When you close your account, we will delete or anonymise your personal data within 90 days, except where we are required by law to retain it.
8. DATA SECURITY
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, disclosure, or destruction. These include encryption in transit and at rest, access controls, and regular security reviews.No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately at info@core-flow.io.
9. YOUR RIGHTS
Depending on your location, you may have certain rights regarding your personal data, including:The right to access the personal data we hold about you.The right to request correction of inaccurate information.The right to request deletion of your data, subject to legal obligations.The right to opt out of marketing communications at any time.The right to data portability in certain circumstances.To exercise any of these rights, please contact us at info@core-flow.io. We will respond within 30 days.
10. CALIFORNIA PRIVACY RIGHTS (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of your personal information. We do not sell personal information. To submit a CCPA-related request, contact us at info@core-flow.io.
11. CHILDREN'S PRIVACY
The service is not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that a minor has provided us with personal data, we will delete it promptly.
12. CHANGES TO THIS POLICY
We may update this privacy policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by updating the "last updated" date at the top of this page. Your continued use of the service after changes are posted constitutes your acceptance of the updated policy.
13. CONTACT
If you have any questions or concerns about this privacy policy or how we handle your data, please contact us at: info@core-flow.io
