Privacy Policy

This is the privacy policy for BizFlow, the business software, customer account, download, licensing, and support service available at www.bizflow.medhatjachour.tech. It explains what personal information BizFlow collects, why we use it, and the choices available to you.

Information we collect

When you create an account, we collect your email address, name if provided, encrypted password credential, account session data, and the sign-in method you choose. When you use Google Sign-In, Google provides your Google account identifier, verified email address, and profile name. We do not receive or store your Google password.

Google Sign-In data

BizFlow requests only the Google OpenID Connect scopes openid, email, and profile. When you choose Continue with Google, we access your Google account's unique subject identifier, verified email address, and display name. We use this information only to create or link your BizFlow account and sign you in. BizFlow does not access Gmail, Google Drive, Calendar, Contacts, or any other Google service.

We store the Google subject identifier, verified email address, display name, account link, and the time the link was created in our customer database. Google authorization codes and access tokens are used only during sign-in and are not stored. We do not request or store refresh tokens, and we do not sell, rent, use for advertising, or allow humans to read Google user data except where necessary to provide support you request.

When you buy or evaluate BizFlow, we collect order and payment status, purchased product, license key, download requests, support tickets and messages, and custom work requests. To enforce a one-device license, we also store a device fingerprint, optional device name, and activation time. We do not use these records for advertising profiling.

How we use information

We use account and transaction information to authenticate you, fulfill purchases, issue and protect licenses, provide downloads, answer support requests, prepare requested edits or custom work, prevent fraud and abuse, and maintain service security. We use email to deliver account, license, password reset, purchase, and support notices.

Payment card data is handled by Stripe. BizFlow does not store full card numbers or CVC values. Stripe sends us limited checkout details needed for fulfillment and accounting under its own privacy policy.

We use cookies only for account authentication, OAuth sign-in protection, and consent-gated analytics where enabled. Authentication cookies are HTTP-only. Operational logs may include request IDs, route, status, and error metadata, but never plaintext passwords, payment card data, or Google access tokens.

Website traffic measurement

We measure our own website traffic without cookies. Each page view and each deliberate click — opening a module in the browser demo, choosing an installer, starting checkout — is stored in our own database with the page path, the site language, the referring site's host, a coarse device type (desktop, mobile, or tablet), and an anonymous visitor id. That id is a keyed hash of your IP address and browser string; the IP address and browser string themselves are never stored, the id is not linked to your name, email, or account, and the hashing key changes at the start of every calendar month, so the id stops matching you and cannot be used to reconstruct a history across months. A separate identifier kept in your browser's sessionStorage lets us list the steps of a single visit; it is erased when the tab closes. Known crawlers are recorded but excluded from every report, and all of these records are deleted after 400 days. We never sell or share them.

Because this measurement sets no cookies and stores no personal identifiers, it runs without a consent prompt. The consent banner you may see covers only the optional third-party analytics providers (Plausible or Google Analytics) that we enable when configured, and declining it does not affect any part of the service.

Sharing, retention, and security

We share data only with service providers needed to operate BizFlow: Google processes the sign-in you initiate, Stripe processes payments, email providers deliver transactional messages, and hosting providers store and transmit our service data. We do not sell or transfer Google user data to third parties for advertising, creditworthiness, or unrelated purposes. We retain account, order, license, and support records while your account or license is active and as needed for legal, tax, security, and dispute obligations. We use encrypted transport, password hashing, HTTP-only session cookies, OAuth state validation, restricted administrative access, and limited-access operational systems to protect data.

Your choices and contact

You may request access, correction, export, deletion, or withdrawal of optional Google Sign-In access by contacting support from the email address on your account. We delete the Google identity link and associated account data on a verified deletion request unless we must retain a limited record for legal, tax, fraud-prevention, or dispute purposes. You can also disconnect BizFlow from your Google account through Google Account permissions. To make a privacy request, open a BizFlow support ticket. When we materially change how BizFlow uses Google user data, we will update this policy's effective date and notify affected account holders by email or in-product notice before the change takes effect.