Privacy Policy

FlowAudit provides AI operations, workflow automation, and revenue recovery services for businesses. You can contact us through the booking or support channels on this website.

We collect information you provide directly, such as your name, email address, company name, phone number, booking details, form responses, and messages you send to us.

We may also collect basic usage and device information, such as pages visited, browser type, approximate location, timestamps, and referral source, to keep the site secure and improve our services.

Revenue Recovery Desk helps clients identify overdue accounts, prepare recovery communications, manage approvals, and track recovery activity. To provide that service, we may process client-authorized business data such as customer contact details, invoice data, account balances, payment status, CRM records, support notes, and recovery history.

If a client connects Google Workspace, Microsoft 365, a CRM, accounting platform, payment provider, or document system, we access only the data needed for the recovery workflow and only according to the scopes and permissions authorized by the client.

If a client authorizes Google Workspace access, Revenue Recovery Desk may use read-only Gmail or Drive metadata permissions to understand customer replies, disputes, promises to pay, bounced messages, recovery context, document locations, or client-provided recovery files.

We do not sell Google user data. We do not use Google user data for advertising. We do not transfer Google user data to third parties except as necessary to provide or secure the service, comply with law, or with the client's explicit direction.

Google Workspace access can be revoked by the client from their Google account security settings or by contacting FlowAudit support.

We use information to provide and improve our services, respond to enquiries, operate Revenue Recovery Desk, prepare draft recovery actions, route approvals, maintain audit records, prevent abuse, secure our systems, and meet legal or contractual obligations.

Revenue Recovery Desk is designed around client authorization and human approval. Sensitive actions such as outreach, letters, payment-plan changes, settlements, and account escalations are gated by the agreed client policy and approval process.

We may use trusted service providers for hosting, authentication, email delivery, secure storage, automation, logging, payment processing, and postal-letter delivery. These providers process data only as needed to provide their services to us and our clients.

We do not sell personal data.

We use safeguards such as encryption in transit, restricted access, audit logging, least-privilege connector scopes where practical, approval gates, credential isolation, and secure vault workflows for sensitive integration keys.

We keep information only as long as needed to provide services, maintain audit and legal records, resolve disputes, meet contractual obligations, and comply with law. Revenue Recovery Desk client records may be retained for the agreed legal retention period after offboarding, while live credentials are destroyed during offboarding.

You may request access, correction, deletion, or restriction of personal information where applicable. Clients can disconnect integrations, revoke OAuth access, request offboarding, or ask us to update business contact details.

We may update this policy as our services evolve. The latest version will be available at this page.

For privacy-related questions, contact FlowAudit through the booking or support channels on this website.