Privacy policy

Who we are

HRFlow (“we”, “us”) provides people-operations software and this marketing website at hrflow.com. Product workspaces will live at app.hrflow.com. Platform operations will live at superadmin.hrflow.com.

For privacy questions, email privacy@hrflow.com. For general inquiries, email hello@hrflow.com.

Information we collect

Marketing site: name, work email, company, team size, and the notes you submit on the demo form; technical data such as browser type, pages viewed, and approximate location derived from IP address.

Product (when your company is a customer): employee and candidate records your organization chooses to store, including contact details, job data, compensation, time, documents, and messages. Your company is the controller of that data. HRFlow processes it to provide the service.

We do not ask you to submit sensitive employee files through the public demo form.

How we use information

To respond to demos, operate and secure the service, bill customers, improve the product, and send service messages. Marketing email is optional and can be stopped at any time.

We do not sell personal information. We do not use customer HR records to train public models.

Sharing

We share data with subprocessors that host, email, or support the service, listed on the Subprocessors page. We share information if the law requires it, or to protect HRFlow, our customers, or others from harm.

Customer administrators control who inside their company can see employee records.

Retention and security

Demo inquiries are kept while the conversation is active and for a limited period afterward. Customer data is kept for the subscription term and a short wind-down window defined in the order form, unless a longer period is required by law.

We use encryption in transit, encryption at rest, access control, and audit logging. See the Security page for the program overview.

Your choices

You may request access, correction, deletion, or a copy of personal information we hold about you, subject to exceptions. Employees should contact their employer first, because the employer controls the HR record.

Cookie choices are described in the Cookie policy. Rights under the Digital Personal Data Protection Act, 2023 are described on the DPDP notice.