The most popular organization items sold together in a set at a discounted price. Each piece is made to sit flush with each other and can be re-arranged to fit...
What FlowZen collects, why we collect it, who we share it with, and how you get it deleted.
FlowZen is business software ("the Service") operated by Zengnia ("we", "us"). It is sold to organisations, and most people who use it do so because their employer gave them an account. This policy explains what personal information we handle, why, and what you can do about it.
Name, username, email address, password (stored only as a salted hash โ we never see or store it in readable form), profile photo, gender, date of birth, and your role in the organisation.
Company name, logo, description, contact email, phone number, postal address, city, state and country, and the workspace subdomain you chose.
The Service stores whatever your organisation puts into it: customers and contacts, quotations, invoices, contracts, purchase orders, stock and warehouse records, shipments, projects and tasks, accounting ledgers, budgets and bank transactions. Where your organisation uses the HR modules, that also includes employee records โ designation, department, employment and position history, attendance, leave, performance reviews, payroll and benefits, tax identification numbers, bank account details for salary payment, and emergency contacts.
If you sign in on the mobile app we register the device so we can sync and notify you: a device identifier, platform, device name, app version, OS version, a push notification token, and when you were last active. We also record API session activity โ a hashed session token, timestamps and the originating IP address โ to keep accounts secure. If you work offline, changes queue on the device and upload when you reconnect.
If you fill in a demo, contact or account-deletion form we keep what you typed plus your IP address. The site uses Google Analytics, and Google Translate if you switch language. Cookies keep you signed in, protect forms against cross-site request forgery, and remember your language.
| Purpose | Legal basis |
|---|---|
| Running the Service and keeping your records available | Performing our contract |
| Authenticating you and securing accounts | Contract & legitimate interest |
| Sending notifications you asked for | Performing our contract |
| Taking subscription payments | Performing our contract |
| Providing support when you contact us | Legitimate interest |
| Detecting abuse and diagnosing faults | Legitimate interest |
| Website analytics | Your consent |
| Meeting tax and accounting obligations | Legal obligation |
Where we rely on consent, you may withdraw it at any time.
Data is hosted on Amazon Web Services. Each organisation's records live in a separate database schema, so one customer's data is never mixed with another's. Some providers above process data outside your country; where that happens we rely on the safeguards those providers offer, such as standard contractual clauses.
Kept for as long as your organisation's account is open, so the Service works.
Workspace and records removed within 30 days of a verified request.
Overwritten on a rolling cycle; residual copies purged within 90 days.
Invoices and payment records kept as long as tax and accounting law demands.
Traffic is encrypted with HTTPS. Passwords are stored as salted hashes. Mobile session tokens are stored hashed, expire, and can be revoked. Access to production systems is limited to staff who need it. No system is perfectly secure, but if a breach affects your personal data we will notify you and the relevant regulator as the law requires.
Depending on where you live, you may have the right to:
To exercise any of these, email support@flowzen.com or use the deletion form below. We respond within 30 days. You may also complain to your local data protection authority. If your account was created by an employer, we will pass your request to them, as they control those records.
You can request deletion of your account and its data at any time. You do not need the app installed, and you do not need to be able to sign in.
Tell us which account to remove. We verify you own it, delete the data, and email you to confirm โ within 30 days.
Open the deletion formThe Service is business software and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has given us data, contact us and we will remove it.
If we change this policy we will update the date at the top and, where the change is significant, tell you in the app or by email before it takes effect.
Zengnia โ FlowZen
Email: support@flowzen.com
Website: flowzen.zengnia.com
