Privacy Policy

Last updated: April 2026 · FlowState by SDE Services

Your privacy matters. FlowState is built for field service businesses — we collect only what's needed to run your business, never sell your data, and give you full control over it.

1. Who We Are

FlowState is a job management platform operated by SDE Services, based in Sydney, NSW, Australia. If you have any questions about this policy, contact us at flowstateappsupport@gmail.com.

2. Information We Collect

We collect information you provide directly when you use FlowState:

Account information — your name, email address, and password (stored securely via Supabase Auth)
Business details — your business name, ABN, phone number, trade type, and logo
Job data — job titles, descriptions, addresses, scheduled dates, notes, and status information
Client information — client names, emails, phone numbers, and addresses you enter
Financial data — quote and invoice details including line items, amounts, and bank payment details you choose to save
Uploaded files — photos and documents you attach to jobs
Usage data — how you interact with the app, for the purpose of improving the service

3. How We Use Your Information

To provide and operate the FlowState service
To generate quotes, invoices, and job reports in PDF format
To send SMS booking messages on your behalf (only when you explicitly trigger them)
To process subscription payments via Stripe
To improve and develop the platform
To respond to your support requests

4. Data Storage and Security

Your data is stored securely using Supabase, hosted on infrastructure within Australia and the United States. We use row-level security (RLS) so your data is only accessible to you and your team — never to other tenants.

Files you upload are stored via Cloudinary. Payments are processed by Stripe; we never store your full card details.

We use HTTPS for all data in transit. Access to backend systems is strictly controlled.

5. Bank Details

If you enter bank details (BSB, account number, account name) for invoice PDFs, these are stored in your browser's local storage on your device only — they are not transmitted to or stored on our servers. They appear on your generated PDF invoices for your clients' payment reference.

6. Sharing Your Data

We do not sell, rent, or trade your personal information. We share data only with:

Supabase — database and authentication provider
Stripe — subscription payment processing
Cloudinary — file and image storage
Netlify — hosting and serverless functions
Law enforcement — only when required by Australian law

7. Cookies and Local Storage

FlowState uses browser local storage to save your preferences, business profile details, and app state between sessions. We do not use third-party tracking cookies or advertising networks.

8. Your Rights

Under Australian Privacy Act 1988 and applicable laws, you have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your account and associated data
Withdraw consent and stop using the service at any time

To exercise any of these rights, email us at flowstateappsupport@gmail.com.

9. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription and close your account, we will delete your data within 30 days, except where we are required to retain it by law.

10. Children's Privacy

FlowState is a business tool intended for adults aged 18 and over. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this privacy policy from time to time. When we do, we'll update the "last updated" date at the top of this page. Continued use of FlowState after changes constitutes acceptance of the updated policy.

12. Contact Us

Questions about this privacy policy? Reach out at flowstateappsupport@gmail.com. We aim to respond within 2 business days.