Privacy policy

Your account. When you sign up or sign in, we receive your name, email address, and sign-in details through Clerk, the service that handles OthFlow logins.

Your workspace. Anything your agency adds to OthFlow, such as clients and their contacts, deliverables, tasks, SEO plans, messages, invoices, and notes.

Client portal activity. When your clients use their portal, we record what they do there, such as approvals, change requests, messages, onboarding steps they complete, and their weekly 1 to 10 rating.

Google data, if you connect it. If you connect Google Search Console and Google Analytics, we receive your Google account email and read-only data for the sites and properties you choose, including clicks, impressions, average position, search queries, pages, sessions, and conversion events.

Demo requests. If you request a demo, we store your name, work email, agency name, and anything else you choose to share, like your website, team size, and what you’d like help with, along with the page you came from.

Technical information. Like most websites, our hosting provider keeps standard server logs, which include IP addresses, browser details, and the pages requested.

• To run OthFlow for you and your clients, including keeping reports up to date.
• To reply to demo requests and set up new accounts.
• To keep the service secure, prevent abuse, and fix problems.
• To contact you about your account, including important service changes.

We don’t sell personal information, and we don’t use it for advertising.

OthFlow only asks Google for read-only access to Search Console and Google Analytics, plus your account email. It can’t change anything in your Google accounts. The access tokens Google gives us are encrypted before they’re stored.

We use this data only to show reports inside OthFlow to your agency and, if you choose, to your clients through their portal. OthFlow’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google at any time from your OthFlow settings, or remove OthFlow’s access from your Google account permissions.

When your agency adds information about its clients, we process it on your behalf so OthFlow can work. You’re responsible for having the right to share that information with us. Each client portal opens from its own private link, and you can replace a link at any time if it’s been shared by mistake.

We only use the cookies needed to sign you in and keep your session secure. We don’t use advertising or analytics cookies.

We use a small number of providers to run OthFlow. They only process data to provide their service to us.

• Vercel hosts the website and app.
• Neon hosts our database, on Amazon Web Services in the United States.
• Clerk handles sign-in and account security.
• Google provides Search Console and Analytics data, only if you connect it.
• Stripe processes card payments, if you pay that way.

We may also share information if the law requires it, or to protect the rights and safety of OthFlow, our customers, or others.

Your data is stored in the United States. If you’re outside the US, this means your information is transferred there, and we rely on our providers’ standard safeguards for those transfers.

We keep your workspace data for as long as your account is active. If you close your account or ask us to delete your data, we’ll delete it, except for anything we have to keep by law, such as billing records. We keep demo requests for as long as we need them to follow up, and delete them on request.

You can ask us to show you the personal information we hold about you, correct it, delete it, or give you a copy. You can also object to how we use it. Email hello@othflow.com and we’ll reply within 30 days.

If you’re in the UK or the European Union, you also have the right to complain to your local data protection authority.

All traffic to OthFlow is encrypted with HTTPS, Google access tokens are encrypted at rest, and each client portal uses a long, random private link. No system is perfectly secure, but we work to protect your information and will let you know if a breach affects it.

OthFlow is a business tool and isn’t meant for anyone under 16.

If we change this policy, we’ll update the date at the top of this page. For significant changes, we’ll also let account owners know by email.

Questions about privacy or your data? Email hello@othflow.com.