Privacy Policy

We only collect information necessary to evaluate engineering engagements, communicate technical proposals, deliver digital solutions, and ensure site security.

A. Information You Voluntarily Provide

• Project Inquiries & Consultations: When you submit our contact form, we collect your full name, business email address, phone number (optional), organization name, project scope, budget range, and project details.
• Client Reviews & Testimonials: If you submit a testimonial via our review portal, we collect your name, organization or professional title, numeric rating (1–5 stars), and your review text. Reviews are held for administrative approval before public display.
• Direct Client Communications: Information exchanged via email, video conference, or messaging platforms regarding architectural specifications, milestone deliverables, or service agreements.

B. Automatically Collected Technical Telemetry

• Standard Web Server Logs: IP address, browser type and version, operating system, referrer URL, timestamps, and pages requested.
• Security & Abuse Prevention: Diagnostic headers and honeypot field evaluations to block automated bots, credential stuffing, and malicious scraping.

We utilize the collected information strictly for transparent and legitimate business objectives:

• To evaluate project scopes and deliver comprehensive engineering proposals, estimates, and schedules.
• To execute formal client contracts (MSAs / SOWs), design interfaces, build web applications, and support client deployments.
• To publish verified client ratings and reviews that help prospective enterprises evaluate our track record.
• To protect our digital infrastructure against DDoS attacks, automated exploitation, and unauthorized access attempts.
• To comply with statutory accounting, tax, and corporate governance requirements.

In accordance with the European Union General Data Protection Regulation (GDPR), UK GDPR, and international data laws, we process personal data under the following legal bases:

• Contractual Necessity: Processing required to prepare or perform a software engineering contract or preliminary scope evaluation.
• Legitimate Interests: Processing necessary for our legitimate commercial interests (e.g., maintaining infrastructure security, client relationship management, service improvement), provided these interests do not override your privacy rights.
• Consent: Explicit permission provided by you, such as when submitting a public review or opting into updates. You may withdraw consent at any time.
• Legal Compliance: Processing required to satisfy applicable tax, regulatory, or corporate recordkeeping laws.

FLOWBITR does not sell, lease, or monetize personal information. We share data only with trusted partners under rigorous data protection terms:

• Secure Infrastructure Partners: Enterprise hosting providers (e.g., Hostinger, cloud datacenters) and transactional email systems that power our core technical operations. All providers are vetted and bound by strict confidentiality and GDPR-compliant Data Processing Agreements (DPAs).
• Legal & Regulatory Authorities: We disclose data only when legally compelled by subpoena, court order, or binding legal mandate.
• Corporate Succession: If FLOWBITR undergoes a merger, acquisition, or corporate reorganization, client records may transition as an operational asset subject to the protections of this Privacy Policy.

We apply defense-in-depth security measures to protect confidential client records and source code from unauthorized access, alteration, or disclosure:

• Encryption in Transit: All network traffic is encrypted via Transport Layer Security (TLS 1.3 / HTTPS) with modern cipher suites.
• Database Protection: Database operations use parameterized queries (PDO prepared statements) to prevent SQL injection vulnerabilities, along with strict network isolation.
• Access Governance: Production environments and client source repositories are restricted via multi-factor authentication (MFA) and least-privilege role policies.

We retain personal information only for the duration required to satisfy the business purposes outlined in this Policy, or as mandated by statutory retention periods (such as commercial accounting and tax compliance). Once this retention window concludes, data is securely wiped or irreversibly anonymized.

Regardless of your geographic location, FLOWBITR extends comprehensive privacy rights to all individuals:

• Right of Access: Request a confirmation and copy of all personal records we hold about you.
• Right to Rectification: Request prompt correction of incomplete or outdated personal information.
• Right to Erasure ("Right to be Forgotten"): Request permanent deletion of personal data where continued retention is no longer justified.
• Right to Restrict or Object: Restrict or object to specific processing workflows on legitimate interest grounds.
• Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format.

To exercise any statutory privacy rights, email our team at info@flowbitr.com. We process verified requests within 30 days without administrative charge.

Our website utilizes strictly essential session cookies and local storage tokens for interface responsiveness, anti-spam validation, and review form state. We do not deploy invasive third-party cross-site behavioral tracking networks or advertising pixels.

If you have any questions, regulatory inquiries, or wish to exercise your data rights, please contact our designated compliance team: