1. Introduction
At Wordflow AI (“we”, “our”, “us”), we are committed to safeguarding your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose your data when you use our platform.
We comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), together with relevant international data protection regulations.
Security and compliance are central to our platform. With enterprise-grade encryption, governance, and compliance built in, Wordflow enables teams to work securely while maintaining full control over their information.
2. About Us
- Company Name: Wordflow AI
- ABN: 76677100551
- Registered Address: 6 Bourke St, Mascot NSW 2020, Australia
- Email: support@wordflow.ai
3. Information We Collect
We collect only the personal information necessary to provide and improve our services:
- Account Information: Your name and email address, provided during sign-up or login. Accounts may be created manually or via Google authentication.
- Payment Information: Subscription and billing details processed securely through Stripe. We do not store your full payment data.
- Optional Information: Where you subscribe to marketing communications, we collect your communication preferences.
We do not knowingly collect sensitive personal information.
4. How We Collect Your Information
- Directly from you: When you create an account, update your settings, or contact us.
- From third-party services: For example, Google (for authentication) and Stripe (for payment processing).
5. How We Use Your Information
Your information may be used to:
- Provide and maintain our services;
- Manage subscriptions and process payments;
- Deliver customer support and respond to enquiries;
- Send newsletters and promotional communications (only where you have opted in, with the ability to unsubscribe at any time);
- Comply with legal, regulatory, and security obligations.
6. Sharing Your Information
We never sell or rent your personal information. We may share it only with:
- Google – for account authentication (Google Privacy Policy);
- Stripe – for payment processing (Stripe Privacy Policy).
All third-party providers are vetted to ensure they meet strict privacy and security standards.
7. International Data Transfers
Your personal data is stored and processed in Australia. We do not transfer your data internationally. However, if you are based outside Australia, you may exercise rights available under your local laws (e.g. GDPR, CCPA, PDPA, APPI, PECR).
8. Data Retention
We retain personal data only for as long as necessary:
- Account Data: Retained while your account is active and for up to 24 months following closure.
- Payment Records: Retained for 7 years to comply with Australian tax and accounting obligations.
- Deleted Accounts: Permanently erased after the applicable retention period, except where legal obligations require otherwise.
9. Your Rights
Depending on your location, you may have the following rights:
- Australia (APPs): To access and correct your personal information.
- GDPR (EU/UK): To request access, rectification, erasure, restriction, objection, and data portability.
- CCPA (California, USA): To know, delete, and opt out of the sale or sharing of personal information.
- PDPA (Singapore & Thailand): To access, correct, and withdraw consent.
- APPI (Japan): To request disclosure, correction, or suspension of use.
- PECR (UK): To refuse cookies and direct marketing communications.
You can also:
- Delete your account and associated data;
- Export your data in a portable format;
- Opt in or out of marketing communications.
To exercise your rights, please contact us at support@wordflow.ai or write to us at our registered address.
10. Data Security and Compliance
Our platform is designed with security at its core:
- Encryption: JWT-based authentication, TLS 1.3 encryption, and role-based access controls to protect data in transit.
- Zero Data Retention for AI Models: Your data and outputs are never used to train third-party AI models. All content remains securely within your workspace.
- Compliance Coverage: We comply with GDPR (EU/UK), CCPA (California, USA), PDPA (Singapore and Thailand), APPI (Japan), PECR (UK), and the Australian Privacy Act.
- User Control: You can set custom data policies, manage access, and delete information at any time.
- Uptime: Our cloud infrastructure provides 99.99% uptime, ensuring reliable and consistent access.
- Breach Notification: In the unlikely event of a data breach, we will notify affected users in line with the Notifiable Data Breaches scheme (Australia), GDPR, and other applicable laws.
11. Cookies and Tracking
We may use cookies and similar technologies to:
- Enhance your user experience;
- Remember login preferences;
- Analyse service usage.
You can control cookies through your browser settings. Where required by law, we will request your consent before using non-essential cookies.
12. Children’s Privacy
Our Services are not intended for children under the age of 16 (or the minimum age of digital consent in your country). We do not knowingly collect personal data from children. If we become aware that we have collected such data, it will be deleted promptly.
13. Links to Other Websites
Our Service may contain links to websites not operated by us. If you follow a third-party link, you will be directed to their website. We strongly advise you to review the privacy policy of every website you visit. We have no control over, and accept no responsibility for, the content, privacy policies, or practices of any third-party websites or services.
14. Updates to This Policy
We may update this Privacy Policy from time to time. Changes will be published on this page and, where appropriate, notified directly to you.
15. Contact Us
If you have any questions or concerns about this Privacy Policy or how your data is handled, please contact us:
Email: support@wordflow.ai
Address: 6 Bourke St, Mascot NSW 2020, Australia