This policy explains what Flowtiny collects, why, and who can see it. In short: we collect what we need to run your orders, we don't sell it, and we don't run ads.
Who we are
Flowtiny ("we", "us") runs the order tool at app.flowtiny.com and the website at flowtiny.com. For any question or request about your information, write to support@flowtiny.com.
Two kinds of people use Flowtiny
- Brands sign up to take orders.
- Customers order from a brand's page or QR code.
For a brand's customers, the brand decides what to ask and what to do with the answers. We keep that information on the brand's behalf and use it only to run the service. A customer who wants their information changed or removed can ask the brand, or write to us and we will act on it or pass it on.
What we collect from brands
- Your brand name, your name, your email and your country.
- A password, kept in a form we cannot read back.
- What you set up: logo, tagline, an address if you add one, items with prices and photos, workflow phases, forms, colors and QR codes.
- Your answer to "How did you find us?" at the end of setup.
- The orders and messages you handle in the app.
What we collect from customers
- A name they type. We don't check it.
- The time they agreed to this policy.
- Their orders: what was ordered, the table or spot, and the totals.
- Whatever the brand asks at checkout or in a phase's form. The brand writes those questions, so the answers vary: a phone number, an address, a date, a photo.
- Files they send, such as a screenshot of a proof of payment.
- Notes between the customer and the brand on an order.
What we don't collect
- We don't take payments. Customers pay the brand directly, by bank transfer, e-wallet, cash or whatever the brand says. We never see card numbers. A proof of payment photo can show account or reference numbers, and it goes to the brand.
- We don't collect advertising IDs, and we don't build advertising profiles.
Cookies and similar storage
- Sign-in cookie. Keeps a brand signed in, for up to 7 days. Scripts on the page cannot read it.
- Guest cookie. Keeps a customer's name and orders on their device, for up to 7 days. Scripts on the page cannot read it either.
- Browser storage. Remembers a customer's basket and a few display choices, such as grid or list. It stays on the device.
- Bot check. When you sign up, Cloudflare Turnstile checks that you are a person. It may read some browser details to do that, under Cloudflare's own policy.
- Monitoring. We run our own monitoring tool that records page loads, errors and slow pages. While a brand is signed in, those reports are tied to the account's id, name and email so we can find and fix problems. Reports from customers are not tied to a name.
The website at flowtiny.com sets no cookies and runs no advertising or analytics scripts.
How we use it
- To run the service: sign you in, show a brand its orders, keep a customer's order with the right brand.
- To keep it safe: block abuse, limit repeated requests, and find and fix bugs.
- To contact you about your account or changes to the service.
- To improve Flowtiny, using counts and the answers brands give us about how they found us.
We don't sell personal information, and we don't use it for advertising.
Who else can see it
- The brand sees its customers' information, and so does any staff the brand gives access to. Other brands can't.
- Companies that help us run the service: the servers that host it, and Cloudflare for the bot check and the website. They handle the information only to provide that service.
- Authorities, when the law requires it or when it's needed to protect someone from harm.
- A buyer, if Flowtiny is ever sold. This policy would still apply to what they receive.
How long we keep it
We keep a brand's information while its account is open. Orders, answers and files stay with the brand's account for the same time. We may delete old uploaded files, such as proof of payment photos, to save space, so brands should save what they need.
To close your account or have specific information deleted, email support@flowtiny.comand we will do it.
Where it is stored
Information is stored on servers we run, and some of it passes through Cloudflare. That can be outside the country you live in.
Keeping it safe
Connections use HTTPS, passwords are stored so that we cannot read them, and access to our systems is limited. No system is perfectly safe. If a breach affects you, we will tell you and, where the law requires, the regulator.
Your rights
Under the Data Privacy Act of 2012 of the Philippines, and similar laws elsewhere, you can ask to see your information, correct it, have it deleted, object to how it's used, or get a copy. Email us and we will reply as soon as we can. You can also complain to the Philippines' National Privacy Commission (privacy.gov.ph).
Children
Opening a brand account is for adults. Flowtiny is not aimed at children, and we don't knowingly collect information from them. If you think a child has given us information, tell us and we will delete it.
Changes to this policy
When this policy changes, we update this page and the date at the top. For changes that matter, we will also email brands.