HRFlow

Privacy Policy

Last updated: March 24, 2026

1. Introduction

HRFlow (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our HR platform and marketing website.

2. Information We Collect

2.1 Information you provide

2.2 Automatically collected information

3. How We Use Your Information

4. Data Security

We implement industry-standard security measures including AES-256 encryption for sensitive data at rest, TLS for data in transit, and role-based access controls. All employee PII is encrypted with AES-256-CBC before storage.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide services. You can request deletion of your data at any time through our GDPR tools or by contacting our support team.

6. Your Rights

Depending on your location, you may have the right to access, correct, delete, or export your personal data. Our platform includes built-in GDPR tools for data subject access requests (DSAR), data portability, and erasure.

7. Third-Party Services

We use third-party services for payment processing (Stripe, Paddle), email delivery, and analytics. These services have their own privacy policies governing the use of your information.

8. Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@hrflow.com.

Privacy Policy | HRFlow