1. Introduction

Welcome to TestiFlow ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience on our website and when using our products and services.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our testimonial collection and management platform (the "Service").

2. Information We Collect

2.1 Information You Provide

Account information (name, email address, password or OAuth identifiers)
Billing-related identifiers as processed by our payment provider (we do not store full card numbers on our servers)
Testimonial content and related metadata you or your customers submit
Communications when you contact us

2.2 Automatically Collected Information

Usage data and product analytics
Device information and browser type
IP address and approximate location derived from network data
Cookies and similar technologies where applicable

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Service
Process subscriptions and send related transactional messages
Respond to your requests and provide support
Monitor usage, secure our systems, and detect abuse
Comply with legal obligations and enforce our terms

4. Legal Bases (where applicable)

Where required by law (for example in the EEA or UK), we process personal data on the basis of contract performance, legitimate interests (such as security and product improvement), consent where requested, and legal obligation.

5. Sharing and Disclosure

We do not sell your personal information. We may share information with:

Service providers who host infrastructure, send email, or provide analytics, under contractual obligations to protect data
Payment processors (e.g. Lemon Squeezy) that handle checkout, subscriptions, and tax where applicable—their privacy policy also applies to payment data they process
Professional advisers, regulators, or law enforcement when required by law
A successor entity in a merger, acquisition, or asset sale, subject to appropriate safeguards

6. International Transfers

Your information may be processed in countries other than your own. Where we transfer personal data across borders, we use appropriate safeguards as required by applicable law.

7. Retention

We retain personal information for as long as your account is active, as needed to provide the Service, and as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

8. Security

We implement appropriate technical and organizational measures designed to protect your information. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

9. Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing, and to data portability or to withdraw consent. To exercise these rights, contact us using the details below. You may also lodge a complaint with a supervisory authority where applicable.

10. Cookies & Similar Technologies

We may use cookies and similar technologies for authentication, preferences, security, and analytics. You can control cookies through your browser settings; disabling some cookies may affect functionality.

11. Children's Privacy

The Service is not directed to individuals under 16 (or the age required in your jurisdiction). We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the "Last updated" date. Material changes may be communicated by email or in-product notice where appropriate.

13. Contact

Questions about this Privacy Policy: Contact us or email apdevstudion@gmail.com.