Privacy Policy

Last updated: July 11, 2026

This Privacy Policy describes how WyllFlow ("Company," "we," "us," or "our") collects, uses, discloses, and protects Personal Data when you access or use our website and services (collectively, the "Service"). It also explains your privacy rights and how applicable laws protect you.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Interpretation and Definitions

Interpretation

Words with capitalized initial letters have meanings defined below. These definitions apply regardless of whether the terms appear in singular or plural form.

Definitions

• Account means a unique account created to access the Service.
• Company refers to WyllFlow.
• Cookies are small files placed on your device by a website.
• Country refers to Ghana.
• Device means any device that can access the Service.
• Personal Data means any information relating to an identified or identifiable individual.
• Service refers to the WyllFlow website and application.
• Service Provider means any third party that processes data on behalf of the Company.
• Usage Data means data collected automatically through use of the Service.
• Website refers to WyllFlow, accessible at https://WyllFlow.com
• You means the individual or legal entity using the Service.

2. Information We Collect

2.1 Personal Data

We may collect the following Personal Data:

• Name
• Email address
• Phone number (if provided)
• Account and subscription information
• Any information you voluntarily provide through the Service

2.2 Third-Party Authentication (Social Sign-In)

You may sign in using third-party authentication providers such as Google and GitHub. When you do so, we may receive certain information from those providers, such as your name, email address, profile image, and unique account identifier, in accordance with your authorization settings.

We do not receive or store your third-party account passwords.

2.3 Usage Data

Usage Data is collected automatically and may include:

• IP address
• Browser type and version
• Pages visited
• Date and time of visits
• Time spent on pages
• Device identifiers
• Diagnostic and performance data

3. Cookies and Tracking Technologies

We use Cookies and similar tracking technologies to operate and improve the Service.

Types of Cookies We Use

• Essential Cookies – Required for authentication and core functionality.
• Functionality Cookies – Remember your preferences and settings.
• Analytics Cookies – Help us understand product usage and improve the Service.

Analytics

We use PostHog (EU Cloud) to collect product analytics and usage data. This helps us understand how users interact with the Service and improve features, usability, and performance. PostHog may use cookies or similar technologies to collect this information.

Managing Your Cookie Choices

When you first visit WyllFlow, a cookie banner lets you accept or reject non-essential (analytics) cookies. Essential cookies always run because the Service cannot function without them; analytics cookies are only set if you accept. Your choice is remembered on your device, and you can change it at any time by clearing the WyllFlow cookies in your browser and reloading the site to bring the banner back.

You may also control cookie usage through your browser settings. Disabling cookies may affect certain features of the Service.

4. Use of Personal Data

We use your Personal Data to:

• Provide, operate, and maintain the Service
• Create and manage user accounts
• Process subscriptions
• Communicate service updates, security notices, and support information
• Send transactional emails and, where permitted, marketing communications
• Monitor usage and improve the Service
• Detect, investigate, and prevent fraud or abuse
• Comply with legal obligations
• Enforce our Terms of Service

5. Email Communications

We use Resend to deliver transactional emails, including account verification, password resets, invoices, billing notifications, and other service-related communications.

Where permitted by law, we may also send marketing communications. You may unsubscribe from marketing emails at any time using the unsubscribe link contained in those emails.

6. Payments and Subscriptions

WyllFlow Subscription Payments

We use Polar.sh to manage subscriptions and process payments for WyllFlow plans. Payment information for your WyllFlow subscription is processed directly by Polar.sh in accordance with its privacy and security practices.

WyllFlow does not store your full payment card details. We may receive limited information related to your subscription, such as your billing status, subscription plan, payment confirmation, and renewal dates.

Customer Payment Providers

WyllFlow enables users to connect supported third-party payment providers, such as Paystack and Flutterwave, to collect payments directly from their own customers.

When you connect a payment provider:

• Payment transactions are processed directly by your selected payment provider.
• Funds are transferred directly between your customers and your payment provider account.
• WyllFlow does not receive, hold, or process customer funds.
• WyllFlow may access limited payment-related information, such as payment status, transaction references, and settlement details, solely to provide payment features, reporting, and customer support.

Your use of any connected payment provider is subject to that provider's own terms and privacy policy.

7. Sharing of Personal Data

We may share Personal Data in the following circumstances:

• With Service Providers who assist us in operating the Service
• In connection with business transactions such as mergers, acquisitions, or asset transfers
• To comply with legal obligations or lawful requests
• With your consent

We do not sell your Personal Data.

8. Third-Party Service Providers

To operate, secure, and improve WyllFlow, we rely on trusted third-party service providers. These providers process information only as necessary to perform services on our behalf and are expected to protect your information.

9. Data Retention

We retain Personal Data only for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. As a general guide:

• Account and Content — retained for the life of your Account. After you delete your Account (or an approved deletion request), we remove or irreversibly anonymize your Personal Data within 90 days, except where longer retention is required by law.
• Invoices, payments, and other financial records — retained for up to 6 years where required to meet tax, accounting, and audit obligations, even after Account closure.
• Usage Data and analytics — retained for up to 24 months, then aggregated or deleted.
• Encrypted backups — cycled out on a rolling basis, typically within 35 days.

These periods are defaults and may be extended where necessary for security, fraud prevention, dispute resolution, or legal compliance, and shortened where the data is no longer needed.

10. Infrastructure and International Data Transfers

WyllFlow uses cloud infrastructure and trusted service providers that may process or store information in multiple countries.

Our primary application database is hosted by Neon in Frankfurt, Germany (European Union). Some of our service providers may process limited information in other jurisdictions where they operate in order to provide their services.

Where Personal Data is transferred internationally, we take appropriate technical and organizational measures to protect it. Where required by applicable law, we implement appropriate safeguards for international data transfers.

11. Your Privacy Rights

11.1 GDPR Rights (EEA, UK, Switzerland)

If you are located in the EEA, UK, or Switzerland, you have the right to:

• Access your Personal Data
• Correct inaccurate information
• Request deletion
• Restrict or object to processing
• Request data portability
• Withdraw consent where processing is based on consent

Our legal bases for processing include consent, contract performance, legal obligations, and legitimate interests.

11.2 CCPA & CPRA Rights (California Residents)

California residents have the right to:

• Know what Personal Information we collect
• Request deletion or correction
• Opt out of the sale or sharing of Personal Information
• Receive equal service regardless of exercising privacy rights

WyllFlow does not sell or share Personal Information as defined under the CCPA/CPRA.

Requests may be submitted to support@WyllFlow.com.

11.3 CalOPPA Compliance

In accordance with the California Online Privacy Protection Act (CalOPPA):

• This Privacy Policy is publicly available.
• Users may review and update certain Personal Data through their account.
• Material changes to this Privacy Policy will be communicated through the Service or by email where appropriate.

Do Not Track Signals

At this time, WyllFlow does not respond to browser "Do Not Track" signals due to the absence of a consistent industry standard.

12. Security of Personal Data

We implement commercially reasonable administrative, technical, and organizational safeguards designed to protect Personal Data against unauthorized access, disclosure, alteration, and destruction.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Data Breach Notification

If we become aware of a personal-data breach that is likely to affect your rights, we will investigate promptly and, where required by applicable law (including the GDPR's 72-hour standard), notify the relevant supervisory authority and affected users without undue delay. Our notice will describe, to the extent known, the nature of the breach, the data involved, the likely consequences, and the steps we are taking to address it and to help you protect yourself.

13. Children's Privacy

WyllFlow is a business tool intended for use by individuals who are at least 18 years old (see our Terms of Service). The Service is not directed to children, we do not knowingly market to or collect Personal Data from anyone under 18, and in no case do we knowingly collect Personal Data from a child under 13 (or the minimum age required in your jurisdiction). If we become aware that we have collected such information, we will promptly delete it.

14. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for their content, security, or privacy practices. We encourage you to review their privacy policies before providing Personal Data.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and the "Last updated" date will be revised accordingly.

Where required by law or where changes are material, we will notify users through email or an in-app notice before the changes become effective.

16. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Email: support@WyllFlow.com

We will make reasonable efforts to respond to your request in accordance with applicable data protection laws.