Privacy Policy

When you use Google to authenticate and sign in to our service, we collect the following information:

• Google Profile Information:Includes your name, email address, and profile picture.
• Usage Data:Information about how you access and use our service, including your IP address, browser type, and pages visited.

We use the information we collect to:

• Provide and maintain our service.
• Improve, personalize, and expand our service.
• Communicate with you, either directly or through one of our partners, for customer service and updates.

TypeFlow's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We access Google APIs (including Google Drive, Google Docs, Google Slides, and Gmail) solely to provide the document automation features you have authorized. We do not use Google API data for advertising or any purpose unrelated to providing and improving our service.

We use the following third-party services to operate TypeFlow:

• Stripe:Payment processing. Stripe handles all payment data directly and we do not store your credit card information.
• Supabase:Database and authentication infrastructure. Your data is stored securely with encryption at rest.
• PostHog:Product analytics to understand how users interact with our service and improve the experience.
• Resend:Transactional email delivery for account notifications and communications.
• Airtable API:Integration with your Airtable bases as authorized by you for document automation.
• Google APIs:Integration with Google Drive, Google Docs, Google Slides, and Gmail for document generation and delivery as authorized by you.

We store OAuth access and refresh tokens to maintain your integrations with third-party services such as Google and Airtable. These tokens allow TypeFlow to act on your behalf without requiring you to re-authenticate each time.

Tokens are encrypted and stored securely in our database. We do not store your Google password or any other account passwords.

You can revoke access at any time by disconnecting the integration from your TypeFlow account settings or by revoking access from your Google Account permissions page.

We do not sell or share your personal information with third parties, except in the following cases:

• With your consent:When you explicitly agree to share your information.
• To comply with legal obligations:If required by law or legal processes.
• To protect rights and safety:To protect the rights, property, or safety of our users and the public.

We take reasonable measures to protect your information from unauthorized access, loss, misuse, or alteration. Data is encrypted in transit using TLS/HTTPS and at rest in our database. However, please note that no internet-based service can guarantee absolute security.

You have control over your information:

• Manage Your Information:Adjust your account settings at any time.
• Disconnect Your Google Account:You can disconnect your Google account from our service whenever you choose.

If you are located in the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). These include:

• Right to Access:You have the right to request a copy of the personal data we hold about you.
• Right to Rectification:You have the right to request that we correct any inaccurate or incomplete personal data.
• Right to Erasure:You have the right to request the deletion of your personal data, subject to certain legal exceptions.
• Right to Restrict Processing:You have the right to request that we limit the processing of your personal data.
• Right to Data Portability:You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

To exercise any of these rights, please contact us at k@typeflow.us. We will respond to your request within 30 days.

We retain Google user data only as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. Retention periods may vary based on data type and legal requirements.

You can request the deletion of your Google user data at any time by contacting us at k@typeflow.us.

Upon receiving your request, we will delete your data from active systems within 30 days, unless we are legally required to retain it.

Please note that some information may remain in backup systems temporarily and will be securely deleted per our data retention policies.

We may update this Privacy Policy periodically. Any changes will be posted on this page, and we will notify you as required.

If you have questions about this Privacy Policy or wish to request data deletion, please contact us at: