Privacy Policy

What we collect

Your account: your name, your email address, and your password. The password is stored only as a hash, so nobody at Abiflow Labs can read it.

Your organisation: its name, the plan it is on, the people you invite, and the role you give each of them.

Your business records: customers, contacts, leads, deals, employees, attendance and leave, accounts, transactions, invoices, bills, projects and tasks. This is the record of your own business, and you decide what goes into it.

Files you upload, including attachments on invoices and other records, and the profile picture you choose. Files are stored under your organisation and are reachable only through it.

Feedback and support messages you send us, along with whatever you write in them.

Technical records created by using the service: sign-in times, the network address a request came from, the browser used, and a log of who changed what inside your organisation.

We do not ask for national ID numbers, biometric data or card numbers, and we do not store them.

Why we use it

To run the service: showing you your own data, sending sign-in codes, verification links and password resets, and keeping the log of changes inside your organisation.

To keep accounts safe: noticing repeated failed sign-ins, slowing down abuse, and looking into faults when something breaks.

To answer you when you write to us.

For the assistant features, when you ask the product to draft or summarise something. Only the text needed for that answer goes to the AI provider, and it is not used to train anyone's model.

We do not sell your data. We do not give it to advertisers, and we do not use it to build a profile of you.

Where it is stored

Your records sit in a PostgreSQL database hosted by Supabase. Organisations are separated inside the database itself, so one organisation cannot read another's rows even if the application asks wrongly.

The application runs on Vercel. Files you upload are stored in Cloudflare R2.

These providers run servers outside Bangladesh, so your data is processed outside the country. Each one gets only what that part of the service needs.

Email

Email leaves the product through Resend or Brevo, depending on which one is set up. They see the address it goes to and the contents of that one message, such as a verification link or an invoice.

We do not send marketing email to you or to your customers. An invoice or portal email goes out because you asked for it.

Cookies

One cookie, for your sign-in session. It is what keeps you signed in as you move between pages.

There is no advertising cookie, no analytics cookie and no third party tracking script in the product.

Clear it and you are signed out. Nothing else depends on it.

Export and deletion

You can export your organisation's data yourself, from Settings, under Your data. The export is a file you keep.

You can delete your account from the same place. When an owner deletes the organisation, its records go with it.

You can also ask us to correct anything we hold about you that is wrong.

If you are a member rather than the owner, ask your owner, or write to us and we will pass the request on. We cannot hand one member the organisation's data on the owner's behalf.

How long we keep it

For as long as your organisation uses the service.

After an account is closed we delete the organisation's data within 90 days. Anything the law requires us to keep for tax or accounting is kept for that long and no longer.

Backups are kept for a short period and are overwritten in the ordinary course, so a deleted record can survive in a backup for a little while after it is gone from the product.

Children

Abiflow OS is a tool for running a business and is not meant for children. We do not knowingly open accounts for anyone under 18. If you think a child has an account, write to us and we will remove it.

Changes to this policy

We will update this page as the product changes. The date at the top is the day the wording last changed.

Where a change matters to you, such as a new provider handling your data, we will say so in the product before it takes effect.

Governing law

This policy is governed by the laws of Bangladesh.

Contact us

Write to abiflowlabs@gmail.com, or message +880 1340-164820 on WhatsApp.