Privacy Policy

• Account information: your name, email address, authentication identifiers, and profile information provided through email sign-in or Google OAuth.
• Letter content: employment, employer, compensation, duties, contact, and signatory details that you enter to prepare a letter.
• Purchase information: transaction identifiers, payment status, amount, currency, and limited customer details received from Stripe. PRFlow does not receive or store your full card number.
• Waitlist and support information: your email address and any information you include when contacting support.
• Technical information: essential session cookies and operational logs used to authenticate users, secure the service, and diagnose errors.

• Provide accounts, payment access, saved letters, document generation, and customer support.
• Process purchases, issue receipts, review refund requests, and prevent fraud or misuse.
• Send service messages, purchase confirmations, security notices, and requested launch updates.
• Maintain, troubleshoot, protect, and improve PRFlow.
• Comply with applicable legal, tax, accounting, and regulatory obligations.

PRFlow uses service providers to operate the product. These currently include Supabase for authentication and database hosting, Stripe for payments, Resend for transactional email, Vercel for website hosting, and Google when you choose Google OAuth. These providers process information under their own terms and privacy commitments.

We do not sell or rent personal information. We may disclose information when required by law, to protect users or the service, or as part of a business reorganization subject to appropriate safeguards.

Letters may contain information about employers, managers, representatives, or other individuals. You are responsible for having a lawful reason to provide that information and for using it only to prepare legitimate employment documentation.

Information may be processed and stored in countries where PRFlow or its service providers operate. We retain information only as reasonably necessary to provide the service, maintain security and records, resolve disputes, and meet legal obligations. Expiration of paid access does not necessarily cause immediate deletion.

We use reasonable administrative and technical safeguards, including authenticated access and database access controls. No online service can guarantee absolute security. Do not submit unnecessary identity documents, government identification numbers, passwords, or payment card details in letter fields or support messages.

You may update or delete saved letters through your account where those controls are available. You may also request access, correction, deletion, or withdrawal from waitlist communications by contacting us. Some records may be retained where required for security, financial, or legal reasons.

PRFlow is not directed to children under 18, and we do not knowingly collect personal information from children.

We may update this policy as the service changes. Material updates will be posted on this page with a revised date. For privacy questions or requests, contact support@prflow.ca.