Privacy Notice

1. Who we are

This Privacy Notice is issued by Covena Flow LLC ("Covena Flow", "we", "us"), trading as Covena Flow. We act as the data controller for personal data collected through our website and the Covena Flow service (the "Service").

2. Personal data we collect

• Account data — name, email address, login credentials.
• Workspace data — company name, community details, team members you invite.
• Content you provide — documents, prompts, and inputs you submit to the Service.
• Support communications — messages you send to us and our replies.
• Usage and telemetry — pages viewed, features used, error logs, device identifiers, browser type, IP address.

3. How and why we use it

4. Who we share data with

• Subprocessors — hosting, database, analytics, and AI inference providers that operate the Service on our behalf under written data-processing terms.
• Merchant of Record (Paddle.com Market Limited) — Paddle handles payments, subscription management, billing, sales tax, and invoicing for all purchases of the Service.
• Professional advisers — legal, accounting, and audit advisers when reasonably required.
• Authorities — where required by law, court order, or to protect our rights.

We do not sell personal data.

5. International transfers

Personal data may be processed in the United States and in other countries where our subprocessors operate. Where data is transferred from the UK or EEA, we rely on appropriate safeguards such as the Standard Contractual Clauses or an adequacy decision.

6. Retention

We keep personal data for as long as your account is active and for a reasonable period afterwards to comply with legal, tax, accounting, and dispute-resolution obligations (typically up to 7 years for billing records). When data is no longer needed, it is deleted or anonymised.

7. Your rights

Subject to your local law, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Restrict or object to processing.
• Receive your data in a portable format.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your data-protection authority (UK/EEA users: your local supervisory authority).

To exercise these rights, email us at privacy@covenaflow.com. We will respond within one month.

8. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, isolated tenant data, and monitored infrastructure. No system is perfectly secure; please use a strong, unique password.

9. Cookies

We use essential cookies required for authentication and session management, and limited analytics cookies to understand how the Service is used. You can manage cookies through your browser settings. Disabling essential cookies will break sign-in.

10. Changes

We may update this Privacy Notice from time to time. The "Last updated" date above will reflect any changes. Material changes will be notified by email or in-app banner.

11. Contact

Covena Flow LLC — privacy@covenaflow.com