Privacy Policy
Last updated: June 21, 2025
KontactFlow (“we,” “us,” or “our”) operates the website at kontactflow.com and the KontactFlow service. This Privacy Policy explains how we collect, use, and protect your information when you use our service.
1. Information we collect
Account information: When you create an account, we collect your email address and the password you choose. We do not store your password in plaintext.
Business profile: Information you enter about your business — services, hours, pricing, FAQs, and uploaded documents — to train your AI assistant.
Lead data: Names, phone numbers, and conversation transcripts captured by your AI widget from visitors to your website. This data is associated with your account.
Usage data: Log data including pages visited, features used, timestamps, and error events. We use this to improve the service and diagnose issues. We do not log message content for diagnostic purposes.
Payment information: Billing is handled by Stripe. We do not store your payment card details — they go directly to Stripe's servers.
2. How we use your information
- To provide and operate the KontactFlow service
- To train your AI assistant on your business information
- To send you lead alert emails and digest reports
- To process payments and manage your subscription
- To diagnose technical issues and improve the service
We do not sell your data. We do not use your business information or lead data to train general AI models.
3. Data sharing
We share data only with the third-party services required to operate KontactFlow:
- Supabase — database and authentication hosting
- Anthropic — AI responses generated by the Claude API (your business context is sent per-request; not stored by Anthropic for model training under standard API terms)
- Stripe — payment processing and subscription billing
- Resend — transactional email delivery (lead alerts, digests)
- Cloudflare — infrastructure, edge computing, and DDoS protection
4. Data retention
We retain your account data and lead data for the duration of your subscription. After account cancellation, your data is retained for 30 days and then permanently deleted. You may request early deletion by contacting us.
5. Your rights
You have the right to access the personal data we hold about you, correct inaccurate data, request deletion of your account and data, and export your lead data from your account settings. To exercise these rights, email hello@kontactflow.com or use your account settings.
6. Security
All data is stored in Supabase with row-level security policies enforced at the database level. Data is encrypted at rest and in transit. We use Cloudflare's edge network, which provides additional DDoS protection and TLS encryption for all traffic.
7. Children
The KontactFlow service is not directed to children under 13. We do not knowingly collect personal information from children.
8. Changes to this policy
We may update this Privacy Policy from time to time. We will notify active account holders of material changes by email. Continued use of the service after changes constitutes acceptance.
9. Contact
Privacy questions or data requests: hello@kontactflow.com