Privacy Policy

1. Who This Policy Covers

This policy applies to two kinds of people:

• Account holders: businesses and individuals who sign up for Ranflo to manage their leads, clients, jobs, and finances.
• End clients: the customers of our account holders, who may interact with a Ranflo-generated client portal (for example, to check a job’s status or leave a review) without creating a Ranflo account themselves.

We describe below what we collect from each group.

2. Information We Collect

2.1 From Account Holders

• Account information: name, email address, business name, industry, country, and currency, collected during sign-up and onboarding.
• Authentication data: handled via Firebase Authentication (email/password, magic link, or Google sign-in). We do not store your password in plain text; Firebase manages credential storage securely.
• Business records you create: leads, client details, job records, financial entries, custom databoards, and any files you upload (e.g., job attachments, profile photos, business logos).
• Usage and plan data: your subscription tier, feature usage counts (e.g., number of jobs or clients), used to enforce plan limits and provide support.
• Payment information: handled directly by our payment processor, Dodo Payments, who acts as Merchant of Record. We do not store your full payment card details.

2.2 From End Clients (portal visitors)

If you are a customer of a Ranflo account holder and access a client portal link:

• Email address, used solely to send a one-time verification code (OTP) or magic link to confirm your identity before viewing the portal.
• Messages and reviews you choose to submit through the portal.
• Your email address is masked and not shown in full to the business owner within the portal interface.

2.3 Automatically Collected

• Standard technical data (IP address, browser type, general access logs) for security, fraud prevention, and rate-limiting on public-facing pages such as lead capture forms and client portals.

3. How We Use Information

We use the information described above to:

• Provide, operate, and maintain the Service
• Authenticate users and secure accounts (including optional multi-factor authentication)
• Enforce plan limits and process subscription billing
• Send essential transactional communications (OTP codes, magic links, password resets, email verification, portal notifications)
• Respond to support requests
• Improve and maintain the reliability of the Service
• Comply with legal obligations

We do not sell your personal information, and we do not use your business records (client lists, job data, financial entries) for advertising purposes.

4. Where Your Data Is Stored

Ranflo uses regional data storage to keep your data close to you and improve performance. Based on the country you select during onboarding, your account and business data is stored in one of the following regions:

A small amount of routing information (which region your account is stored in) is kept in a global index to direct your requests correctly.

5. Third Parties We Share Data With

We use the following service providers (“sub-processors”) to operate Ranflo. Each only receives the data necessary to perform its function:

We do not share your data with third parties for their own marketing purposes.

6. Data Retention and Deletion

• Your business records are retained for as long as your account remains active.
• Before deleting your account, we recommend exporting any data you may need (via the CSV or Excel export options available within the Service), since deletion cannot be undone.
• Once account termination is completed, your data is permanently removed from our systems across all regions.
• We are not able to recover data after this window has passed. You are responsible for retaining any records you may need for your own business, tax, or legal purposes.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Export your data in a portable format
• Request deletion of your account and associated data
• Object to or restrict certain processing

To exercise these rights, contact us at contact@ranflo.com.

8. Cookies and Session Data

We use a small number of essential cookies and browser storage mechanisms:

• A secure, HTTP-only session cookie to keep you signed in
• A session token for client portal access (valid for up to 7 to 14 days, depending on verification method)

We also use Firebase Analytics (Google Analytics via Firebase) to understand aggregate usage of the Service, such as which pages and features are used most often. This helps us improve the Service. Analytics only runs after you accept analytics cookies through the consent banner shown on first visit. You can change your choice at any time by clearing your browser storage and reloading the site.

We do not use third-party advertising or marketing cookies, and we do not use analytics to build advertising profiles.

9. Security

We take reasonable technical and organizational measures to protect your data, including encrypted storage for certain sensitive fields, secure authentication (including optional MFA), and access controls enforced at the database level. No system is completely secure, and we cannot guarantee absolute security of information transmitted to the Service.

10. Children’s Privacy

Ranflo is not directed at, and is not intended for use by, individuals under the age of 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify account holders via email or an in-app notice before the changes take effect.

Separately, the specific plans, features, pricing, and service options of Ranflo may change without notice as we continue to improve the Service, as described in our Terms and Conditions.

12. Contact Us

If you have questions about this Privacy Policy or how your data is handled, contact us at:

contact@ranflo.com

Ranflo is a product of Verveance.