Privacy Policy

Essoflo Labs (“Essoflo,” “we,” “us,” or “our”) operates essoflo.com and the Essoflo platform (the “Service”). This Privacy Policy explains how we collect, use, share, and protect personal information when you use the Service.

If you have questions, contact support@essoflo.com.

Information We Collect

Information you give us

• Account information: name, email address, and password when you create an account
• Profile and contact details: phone number, business name, role
• Billing information: billing address and payment details (payment card data is processed by Stripe — we do not store full card numbers on our servers)
• Content you upload: files, documents, flowcharts, SOPs, and other materials you create or upload to your workspace
• Communications: messages you send to support or feedback you submit

Information we collect automatically

• Usage data: pages viewed, features used, actions taken in the Service, timestamps
• Device and connection data: IP address, browser type, operating system, device identifiers, referring URLs
• Cookies and similar technologies: see our Cookie Policy

How We Use Your Information

We use personal information to:

• Provide, operate, and maintain the Service
• Create and manage your account and workspace
• Process payments and manage subscriptions
• Send transactional emails (account notices, billing receipts, security alerts)
• Respond to support requests
• Improve the Service, troubleshoot issues, and develop new features
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations

We do not sell your personal information.

Legal Bases for Processing (EU/UK Users)

If you are in the European Economic Area or United Kingdom, we rely on the following legal bases under the GDPR:

• Contract: to provide the Service you signed up for
• Legitimate interests: to operate, secure, and improve the Service
• Consent: for optional cookies and marketing communications (you can withdraw consent at any time)
• Legal obligation: to comply with applicable laws

How We Share Information

We share information only as described below:

• Service providers (subprocessors): companies that help us run the Service. See our Trust Center.
• Within your organization: content you create in a workspace is visible to other members of that workspace.
• Legal requirements: if required by law, court order, or to protect our rights, users, or the public.
• Business transfers: if Essoflo is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.

Data Retention

We keep your information for as long as your account is active or as needed to provide the Service. After account deletion, we may retain certain data for a limited period to comply with legal obligations, resolve disputes, and enforce our agreements. Backups are typically purged within 30–90 days.

Security

We use industry-standard safeguards to protect your information, including HTTPS encryption in transit, encryption at rest, hashed passwords, and regular backups. No method of transmission or storage is 100% secure, but we work hard to protect your data. Learn more at our Trust Center.

International Data Transfers

Essoflo is based in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S. We rely on appropriate safeguards (such as Standard Contractual Clauses) where required by law for transfers from the EEA, UK, or Switzerland.

Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your information
• Object to or restrict certain processing
• Withdraw consent
• Receive your information in a portable format
• Lodge a complaint with a data protection authority

How to Make a Request

Email support@essoflo.com. There is no form to fill in and no account required. So that we can act on it rather than write back asking, tell us:

• which right you are exercising (access, deletion, correction, portability, objection)
• the email address you use with Essoflo, so we can find your records
• where you live, since which law applies depends on it
• if you are making the request on someone else’s behalf, say so and include their permission

We verify who you are before acting — usually by replying to the email address on the account, since acting on an unverified deletion request would be its own privacy failure. We do not charge for this, and we will not treat you differently for asking.

We respond within the time the applicable law allows: 45 days for requests under US state privacy laws (extendable once by a further 45 days where the law permits, and we will tell you if we need it), and one month under the UK and EU GDPR.

If We Say No

You can appeal any refusal by replying to our response, or by emailing support@essoflo.com with “Privacy request appeal” in the subject line. We will review the decision and write back with the outcome and our reasons. If you are still not satisfied, you may contact your state attorney general or, in the UK or EU, your data protection authority.

California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and share
• Request deletion of personal information
• Correct inaccurate information
• Opt out of the sale or sharing of personal information (we do not sell personal information)
• Be free from discrimination for exercising your rights

To opt out of sharing for advertising, use cookie settings or the “Do Not Sell or Share My Personal Information” link in the footer of every page. We also honour the Global Privacy Control signal: if your browser sends it, we treat it as an opt-out without your having to ask. For every other right, email us as described above.

Children’s Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service. The “Last updated” date at the top reflects the most recent revision.

Contact Us

Essoflo Labs
Email: support@essoflo.com
Mailing address: 123 Business Lane, Suite 100, Nashville, TN 37203, USA