Privacy Policy

This Privacy Policy explains how Alura Agency LLC (“Alura”, “we” or “us”) collects, uses, and protects personal information when you visit our websites, interact with our content, use the MyFloww platform, or otherwise engage with our services. We are committed to safeguarding your data and complying with all applicable privacy regulations, including the GDPR, UK GDPR, and CCPA/CPRA.

1. Data Controller & Contact

For questions about this policy, data protection, or to exercise your rights, contact us at privacy@aluraagency.com. EU/UK residents may also request contact details for our GDPR representative.

2. Information We Collect

2.1 Data you provide directly

• Account, onboarding, and billing details (name, business information, payment data).
• Support requests, survey responses, and feedback shared with our team.
• Content uploaded or generated inside the MyFloww workspace.

2.2 Data collected automatically

• Device identifiers, browser type/version, time zone, and basic diagnostic data.
• Usage metrics such as page views, feature adoption, session duration, and click events.
• Limited cookies or similar technologies to keep you logged in and remember preferences.

2.3 Third-party sources

We may supplement your profile with data from referral partners, advertising platforms, or integrations you enable (for example, CRMs, billing tools, or calendars). These sources are only connected with your explicit permission.

3. How We Use Personal Data

• Provide, secure, and maintain the MyFloww platform and related services.
• Process payments, subscriptions, and contractual obligations.
• Deliver onboarding, product updates, marketing communications, and event invitations.
• Offer support, diagnose performance issues, and respond to legal requests.
• Conduct analytics to improve features, detect abuse, and optimize the user experience.

Processing is based on contractual necessity, legitimate interests (platform security, product enhancement, direct marketing), compliance with legal obligations, or your consent where required.

4. Cookies & Tracking

We use strictly necessary cookies for authentication and security. With your consent we may deploy analytics or performance cookies to understand usage trends. You can manage preferences via your browser settings or request opt-out instructions from privacy@aluraagency.com.

Specifically, we use Hotjar (ContentSquare) to analyze user behavior (heatmaps, session recordings) to improve the platform's usability. This data is anonymized and not used for advertising purposes.

5. Sharing & International Transfers

We limit access to personal data and only share it with:

• Cloud infrastructure, analytics, and customer support providers operating under DPA/GDPR-compliant agreements.
• Payment processors and financial institutions required to fulfill transactions.
• Professional advisers (legal, tax, audit) bound by confidentiality obligations.
• Authorities when legally compelled to comply with applicable laws.

If data is transferred outside your jurisdiction, we rely on appropriate safeguards such as Standard Contractual Clauses or the UK International Data Transfer Addendum.

6. Data Retention

We retain personal data only as long as necessary for the purposes summarized above, to comply with legal obligations, resolve disputes, or enforce agreements. Account-level data is typically kept for the duration of your contract and erased within 90 days of closure unless longer retention is legally required.

7. Your Rights

Depending on your region, you may have the right to:

• Access, correct, or delete personal information we hold about you.
• Object to or restrict certain processing activities.
• Receive a portable copy of your data.
• Withdraw consent where processing relies on consent.
• Opt out of marketing communications at any time.
• Lodge a complaint with your local supervisory authority.

Submit requests to privacy@aluraagency.com. We will verify your identity before acting on your request.

8. Security Measures

We apply administrative, technical, and organizational safeguards, including role-based access controls, encryption in transit, logging, vulnerability management, and employee training. No system is entirely risk-free; please notify us immediately if you suspect unauthorized activity.

9. Children’s Privacy

Our services are not directed at children under 16. We do not knowingly collect personal information from minors. If you believe a child has provided data to us, contact privacy@aluraagency.com and we will remove it promptly.

10. Changes to This Policy

We may update this Privacy Policy to reflect legal, technical, or business developments. The revision date will appear at the top of this page, and material changes will be communicated via email or in-product notification.