Privacy Policy

This Privacy Policy describes how InvoiceFlow (InvoiceFlow Solutions Limited) collects, uses, and protects your personal information. We are committed to protecting your privacy and handling your data responsibly. This policy outlines our practices regarding data collection and processing when you use our website and services.

Who We Are

We are a Toronto-based enterprise providing automated invoice and billing pipeline solutions for accounts payable operations. We operate under Canadian privacy laws and are dedicated to ensuring transparent data practices. Our services help organizations streamline their financial workflows while maintaining the highest standards of data protection and security.

Information We Collect

We collect information in several ways to provide and improve our services:

• Contact Information: When you submit inquiry forms or contact us, we collect your name, email address, phone number, and company details.
• Usage Data: We automatically collect information about how you interact with our website, including pages visited, time spent on pages, and device information.
• Cookies and Tracking: We use cookies to enhance your browsing experience and understand how you use our website.
• Payment Information: If you subscribe to our services, we collect billing information processed through secure payment providers.

Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Consent: Where you have explicitly agreed to our data processing, such as when subscribing to our mailing list or using our services.
• Legitimate Interest: We process data to improve our website functionality, prevent fraud, and enhance security.
• Legal Obligation: We may process data to comply with applicable Canadian laws and regulations.
• Contract Performance: We process information necessary to provide the services you request and maintain your account.

How We Use Your Information

Your information is used to:

• Provide and maintain our automated invoice and billing services
• Respond to your inquiries and customer support requests
• Send you service updates, newsletters, and marketing communications (with your consent)
• Improve our website and services based on your feedback and usage patterns
• Monitor and prevent fraudulent activity and security threats
• Comply with legal obligations and protect our rights

Data Retention

We retain your personal information only as long as necessary to provide our services and comply with legal obligations:

• Contact Form Submissions: Up to 24 months after your last interaction with us.
• Account Information: Retained for the duration of your account and 12 months after termination.
• Analytics and Cookie Data: Up to 14 months from the date of collection.
• Server Logs: Retained for up to 12 months for security and troubleshooting purposes.
• Email Communications: Up to 18 months unless legally required to retain longer.

Once the retention period expires, we securely delete or anonymize your information unless we are required by law to retain it.

Your Privacy Rights

You have the following rights regarding your personal information:

• Right to Access: You can request a copy of the personal information we hold about you.
• Right to Correction: You can request that we correct inaccurate or incomplete information.
• Right to Deletion: You can request the deletion of your personal information, subject to legal obligations.
• Right to Restrict Processing: You can request that we limit how we process your data.
• Right to Withdraw Consent: You can withdraw your consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada if you believe we have violated your privacy rights.

To exercise any of these rights, please contact us using the information provided below.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small files stored on your device that help us recognize you and remember your preferences. We use both session cookies (temporary) and persistent cookies (longer-lasting) for functionality, analytics, and marketing purposes.

You can control cookies through your browser settings and choose to disable them, though this may affect website functionality. We respect your cookie preferences and do not use cookies for tracking purposes without your consent.

Data Security

We implement robust technical and organizational measures to protect your personal information from unauthorized access, alteration, and disclosure. Our security practices include encryption of data in transit and at rest, secure access controls, regular security audits, and employee training on data protection. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Third-Party Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

• Service providers who assist us in operating our website and providing services
• Legal authorities if required by law or to protect our rights and safety
• Business partners with your explicit consent

All third parties are required to maintain the confidentiality and security of your information and use it only for the purposes specified.

International Data Transfers

Your information is primarily stored and processed in Canada. If we transfer data internationally, we implement appropriate safeguards to ensure adequate protection, including standard contractual clauses and adequacy decisions where applicable.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a minor without parental consent, we will promptly delete such information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website with a new "last updated" date. Your continued use of our services constitutes acceptance of the updated Privacy Policy.