Privacy Policy

Last updated: 19 March 2026

1. Who we are

Zypflow ("we", "us", "our") is an AI-powered customer growth platform for UK service businesses. Our registered address is available upon request. For data protection queries, contact us at hello@zypflow.com.

2. What data we collect

We collect the following categories of personal data:

  • Account data: name, email, phone number, business name when you sign up
  • Customer lead data: name, email, phone, service interest captured via the chat widget on your website
  • Conversation data: messages exchanged with the AI chat assistant
  • Payment data: processed securely by Stripe — we never store card numbers
  • Usage data: pages visited, features used, collected via PostHog analytics
  • Device data: IP address, browser type, operating system

3. How we use your data

  • To provide and maintain the Zypflow platform
  • To process payments and manage subscriptions
  • To send appointment reminders and follow-up messages via SMS and email
  • To improve our AI assistant and platform features
  • To send service-related communications
  • To comply with legal obligations

4. Legal basis for processing (GDPR)

  • Contract: processing necessary to provide our services
  • Legitimate interest: analytics, security, and service improvements
  • Consent: marketing communications (you can opt out at any time)
  • Legal obligation: tax, accounting, and regulatory requirements

5. Third-party services

We share data with the following trusted processors:

  • Supabase (EU) — database hosting
  • Stripe — payment processing
  • Twilio — SMS messaging
  • Resend — email delivery
  • OpenAI / Anthropic — AI conversation processing
  • Vercel — application hosting
  • PostHog — product analytics
  • Sentry — error tracking

6. Data retention

We retain your data for as long as your account is active. If you cancel your subscription, we delete your data within 90 days unless required by law to retain it longer. Lead data captured via the chat widget is retained for the duration of your subscription.

7. Your rights

Under GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time

To exercise any of these rights, email hello@zypflow.com.

8. Cookies

We use essential cookies for authentication and analytics cookies (PostHog, Google Analytics) to understand how you use our platform. You can manage cookie preferences via the cookie consent banner shown on first visit.

9. SMS opt-out

You can opt out of SMS messages at any time by replying STOP to any message. We will immediately cease sending SMS communications.

10. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes via email or through the platform.

11. Contact

For any privacy-related questions, contact us at hello@zypflow.com.

If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).