This Privacy Policy explains what personal data Picflow collects, how we use it, and the choices you have. It applies to our websites and application (the “Platform”) and the Picflow service. Please read this policy carefully. If you do not agree with it, you can stop using the Platform.
TLDR
We process personal data to operate Picflow and support customers.
We use third-party providers for operations, analytics, and marketing.
Picflow is a Swiss company and the primary hosting location is in the EU.
You can request access, correction, or deletion.
Personal Data Usage
We use personal data to:
Provide and operate the Platform (including authentication, collaboration features, billing, and customer support)
Maintain security, prevent abuse, and debug issues
Understand usage and improve the Platform (analytics)
Measure marketing performance and improve ad targeting on third-party platforms (advertising pixels), as described in our Cookie Policy
Controller and Processor Roles
Depending on the context, Picflow may act as a controller (for example, for website, marketing, and billing data) or as a processor (for Customer Content and End-user personal data processed within Customer Projects on behalf of customers).
Personal Data Sharing
We may share personal data with:
Service providers who help us run the Platform (for example, hosting and authentication). Where Picflow acts as a processor for a customer, these providers may act as subprocessors under our DPA (see "Subprocessors").
Marketing and website analytics providers used for Picflow’s own controller-context activities (see “Third-Party Providers” below).
Payment processing providers for payment transactions (see “Payment Processing” below).
Authorities or other parties when required by law, legal process, or to protect Picflow, our customers, users, and the Platform.
In connection with a business transaction, such as a merger, acquisition, reorganization, or sale of assets (subject to applicable law).
Information Collection
We collect two types of information from visitors and users:
Unidentified and non-identifiable information (“Anonymous Information”).
Personal data, meaning information that can identify an individual or may, with reasonable efforts, lead to the identification of an individual.
Please note that your name may be publicly available on the Internet when you use some features of the Service, such as comments in public Projects. Use your discretion when using these features. You are responsible for what you choose to share with members and non-members.
Deletion Requests and Your Rights
You may request access, correction, or deletion of your personal data by sending an email to privacy@picflow.com. We will respond within the timeframe required by applicable law or a reasonable timeframe. You can delete your Picflow account in the app as described in Deleting Your Account.
Depending on where you live, you may have rights with respect to your personal data under applicable data protection laws (including the GDPR, Swiss Data Protection Law, and/or the UK GDPR), subject to exemptions provided by law. These rights may include:
The right to request access to your personal data
The right to request correction or deletion of your personal data
The right to object to the use and processing of your personal data
The right to request that Picflow limit its use and processing of your personal data
The right to request portability of your personal data
The right to make a complaint to a governmental supervisory authority
We strive to provide these rights to all visitors and users.
Information Collection Methods
Picflow collects information about you only if we have a reason for doing so, such as to provide the services, to communicate with you, or to improve our Platform.
Information collected automatically through accessing the Platform. When you visit the Platform, your actions as you browse, upload information, download information, or access links may be tracked.
Picflow will not sell, license, rent, or otherwise disclose your personal data except as stated herein, or under the following circumstances: (1) you have given your consent; (2) we previously notified you of the disclosure in this Privacy Policy or when you provided your information on the Platform; (3) we are compelled by law, legal process, or court order to disclose; (4) disclosure is required to identify, contact, or bring legal action against someone who may cause harm to, or interference with, Picflow’s rights or property, our users, or anyone else; or (5) to respond to an inquiry, request or complaint that you have made. Picflow may cooperate with internet service providers to identify users whenever required to comply with law, to enforce compliance with this Privacy Policy or our Terms, or to protect the Platform, our customers and others.
Data Storage
Picflow’s primary hosting location is Ireland (EU). Some infrastructure and subprocessors may process data in other regions, including the United States.
Picflow will take commercially reasonable steps to protect the transmission and storage of transactional information. Such measures may include secure transmission and encryption of sensitive financial or other transaction-related information. Such information will only be accessible by authorised individuals with special access rights to our payment systems.
Unless otherwise specified, whenever you make a purchase, your financial and other transaction-related information will only be used to process your transaction and will not be stored on our servers or used for marketing purposes.
International Transfers
Picflow is based in Switzerland and uses global service providers, so personal data may be transferred to and processed outside Switzerland/EEA/UK, including the United States. Where required by applicable law, we rely on appropriate safeguards for these transfers, such as adequacy decisions or equivalent determinations (where applicable), and standard contractual clauses or other lawful transfer mechanisms.
Where Picflow acts as a processor for Customer Content and End-user personal data processed within Customer Projects on behalf of a customer, see our Data Processing Addendum for more detail.
Security
We use technical and organizational measures designed to protect personal data from unauthorised access, use, or disclosure. While we work to protect your information, security risks can never be fully eliminated. For more detail, see our Security Policy.
Cookies
Picflow uses cookies and similar technologies (including tracking pixels) on our websites and in our application for essential functionality, analytics, and marketing measurement. You can learn more, including how to control cookies and vendor opt-outs, in our Cookie Policy.
Third-Party Providers
Picflow uses third-party providers for operational services, payments, and analytics, and for marketing measurement. We do not share Customer Content for advertising purposes. However, we may share limited website interaction data (such as page events and hashed identifiers) with analytics and marketing measurement providers to improve campaign performance.
Alphabet, Inc. | Marketing, Analytics | Google Ads, Analytics, and Tag Manager for marketing and analytics. |
Meta Platforms, Inc. | Marketing | Meta Pixel and related tools for marketing and audience features. |
Microsoft Corporation | Marketing | LinkedIn advertising and Microsoft Clarity behaviour analytics. |
Mixpanel, Inc. | Analytics | Product analytics to understand and improve the Platform. |
n8n GmbH | Operational | Workflow automation for account lifecycle communications. |
Pinterest, Inc. United States | Marketing | Marketing measurement and targeting on Pinterest. |
Slack Tech, LLC United States | Operational | Internal team communication and notifications. |
Stripe, Inc. United States | Payments | Independent controller for payment processing. |
Notification of Changes
Picflow may at any time and in its sole discretion, add, modify, or remove any feature, function or portion of the Platform, the Terms, and/or the Privacy Policy, in whole or in part, with or without notice to you, prior or otherwise. Any changes to the Privacy Policy will be effective as of the posting date. Picflow will provide prominent notice on the Platform of any major changes to the Privacy Policy. Your continued use of the Platform after Picflow posts any modifications to the Privacy Policy shall be deemed your explicit acceptance of those modifications and shall constitute your agreement to comply with the Privacy Policy, as modified.
Contact
If you have questions or concerns about this Privacy Policy, please get in touch with us by email at privacy@picflow.com.