This page explains how AIFlowBiz handles the business and customer data you put into the platform. It complements our privacy policy and security page.
What data we store
- Account data — your email, name, business profile, plan, billing history.
- Business data — customers, invoices, expenses, inventory, staff, appointments and marketplace orders that you or your team create.
- Operational metadata — logs, error reports and automation history used to keep the product reliable.
What we don't do
- We do not sell your data.
- We do not use your business data to train shared AI models.
- We do not share customer contact information with third parties for marketing.
Access boundaries
- Row-level security ensures a signed-in user only sees rows scoped to their own business.
- Support staff access is limited, logged, and only used when you request help.
- The AI assistant is scoped to your account and cannot read other users' data.
Retention
- Active accounts: data is retained as long as your account exists.
- Deleted records: soft-deleted for up to 30 days, then permanently removed.
- Closed accounts: data is deleted within 30 days of account closure, except records we're legally required to keep (e.g. tax invoices, payment logs).
- Backups: rolling encrypted backups are retained for up to 30 days.
Portability & export
Every core module (customers, invoices, expenses, inventory) supports CSV export from the dashboard, so you can move your data at any time.
Your rights
You can request access, correction or deletion of your personal data via the contact page. We respond within 30 days.
Sub-processors
AIFlowBiz uses managed infrastructure for database, storage, email and payment processing. Payment processing is handled by Razorpay. When we add a new sub-processor that touches customer data, we update this page.