Overview
Experience Flows ("we," "us," or "our") operates the website at experienceflows.ai, the client portal at app.experienceflows.ai, and the websites we build and host for our clients. This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that information. We respect your privacy and are committed to handling your data responsibly.
Information We Collect
Information you provide directly:
- Name, email address, phone number, and business name — submitted through our contact form
- Message content and service interest — submitted through our contact form
- Pricing plan selection — when you navigate to contact from a pricing page
- Account information (name, email address, phone number) and support requests — if you are a client using our portal
- Billing information — if you are a client; payment card details are collected and stored by Stripe, our payment processor (we keep only the card brand, last four digits, and expiration date)
Information collected automatically:
- Standard web server logs (IP address, browser type, pages visited, timestamps)
- Product analytics (pages visited, features used, and form submissions) collected through PostHog
- Performance and traffic metrics (page load times, Core Web Vitals) collected through Vercel Analytics and Speed Insights
- Cookies required for basic site functionality (language preference, and login sessions in the client portal)
How We Use Your Information
- To respond to your inquiry and provide the services you request
- To provide, operate, and bill for our services if you are a client
- To send you information related to your inquiry (we will not add you to marketing lists without your consent)
- To understand how our websites are used and to improve our website and services
- To comply with legal obligations
How We Share Your Information
We do not sell, rent, or trade your personal information. We share data only with service providers that process it on our behalf:
- Vercel — our hosting provider, which processes web requests and collects aggregate performance and traffic analytics on our behalf
- Supabase — our database and authentication provider, which stores client accounts, website content, and contact form submissions
- Stripe — our payment processor, which handles client billing and payment card details
- Resend — our email delivery provider, used to deliver contact form submissions and service emails
- PostHog — our product analytics provider, used to understand how our websites and portal are used
- Upstash — our rate-limiting provider, which briefly processes IP addresses to protect our forms from abuse
- Legal authorities — only when required by law
Websites We Host for Our Clients
When you submit a contact form on a website we build and host for one of our clients, the information you provide (name, email address, phone number, and message) is collected on behalf of that business and delivered to them. That business decides how to use your information; we store and process it solely to provide our services to them, and we retain it only for the period described in the Data Retention section below. To have your information removed, you can contact the business directly or email us at
website-services@experienceflows.ai.
Cookies
We use a cookie to remember your language preference (English or Spanish), session cookies to keep clients signed in to the portal, and first-party analytics cookies (PostHog) to understand how our own websites are used. Our analytics do not follow you across other websites, and we do not use advertising cookies or third-party ad tracking pixels. Clients can opt out of product analytics at any time from their portal settings.
Data Retention
Contact form submissions are retained for as long as needed to respond to your inquiry and maintain our business relationship. Submissions received through websites we host for clients are retained for up to twelve months from submission (or ninety days after the business archives them) and are then deleted automatically; the business or the visitor may request earlier deletion. Client account and billing records are retained for the duration of our service relationship and as required for tax and accounting purposes. You may request deletion of your data at any time by emailing us.
Your Rights
Depending on your location, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your personal information
- Object to or restrict certain processing of your data
We do not sell or share your personal information as those terms are defined by the California Consumer Privacy Act (CCPA), and we honor applicable requests under the CCPA, the EU General Data Protection Regulation (GDPR), and similar laws.
To exercise any of these rights, contact us at website-services@experienceflows.ai.
Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this page periodically.