PF
PlumbFlow

Privacy Policy

Last updated: 20/04/2026

1. Introduction

Welcome to PlumbFlow, a software-as-a-service (SaaS) platform built and operated by U-Flow Solutions (PTY) LTD ("we", "us", or "our"). PlumbFlow is designed to help plumbing professionals manage their businesses.

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR). This Privacy Policy explains how we collect, use, store, and protect your personal data, as well as the data you process on behalf of your customers when using our website and progressive web app (PWA).

For the purpose of UK GDPR, U-Flow Solutions (PTY) LTD is the Data Controller for the personal data of plumbers and business owners who subscribe to PlumbFlow. For the information you input about your customers, you are the Data Controller, and we act as your Data Processor.

2. Information We Collect

We collect various types of information depending on how you use our platform:

Data you provide directly (Business Details):

  • Name, business name, and contact details (email address, phone number, physical address).
  • Business logo and branding materials.

Customer data you input:

  • You may enter your customers' names, phone numbers, email addresses, physical addresses, job notes, and photos of plumbing work into PlumbFlow.

Integration Data:

  • Google Calendar Data: With your consent, we access your Google Calendar via OAuth to read and write calendar events relevant to your business scheduling.
  • Location Data: We use the Google Maps API to process location and address data for job sites and routing.

Automatically Collected Data:

  • Device data relevant to the functioning of our PWA (e.g., service worker state, push notification tokens, browser type).
  • Basic usage analytics to understand how the platform is used and to improve our software.

Financial Data:

  • Subscription payments are processed securely via Stripe. We do not store or collect your complete credit card details on our servers.

3. How We Use Your Information

We use the collected information only for specific, lawful purposes:

  • To operate and provide the PlumbFlow platform and its features.
  • To facilitate SMS communications between you and your customers via Twilio.
  • To send transactional emails (invoices, password resets, notifications) via Resend.
  • To synchronize your schedule via Google Calendar.
  • To process your subscription payments securely.
  • To analyze errors, fix bugs, and track platform stability via Sentry.
  • To maintain compliance with legal and regulatory requirements.

4. Google API Services Limited Use Disclosure

PlumbFlow's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

PlumbFlow specifically requests access to Google Calendar API to allow you to sync job bookings. We do not use your Google data for any advertising purposes, nor do we sell this data to third parties. Human access to Google data is strictly prohibited unless expressly mandated by you for direct support purposes or if required by law.

5. Third-Party Service Providers

To deliver our platform, we share necessary data with trusted third-party service providers. All our providers maintain strict data privacy standards:

  • Supabase (Database & Authentication): Stores your account details and customer data. Data is hosted securely on EU servers (eu-west-2, London region).
  • Stripe: Securely processes your subscription billing data.
  • Twilio: Processes the content of your text messages for communications with customers.
  • Resend: Handles automated system and transactional emails.
  • Vercel: Hosts the web platform infrastructure.
  • Google Maps Platform: Processes addresses for geocoding and autocomplete.
  • Sentry: Tracks application errors and performance to help us keep the app stable.

6. Data Storage and Retention

All primary database records are stored in the UK/EU via Supabase (London region).

We retain your personal and business data for as long as your account is active. If you cancel your subscription, we will hold your data for a grace period of 30 days to allow for account recovery or data export. Following this grace period, or upon a direct request for permanent deletion, your data (and your customers' data) will be permanently and irretrievably erased, except where retention is legally required for accounting and tax purposes.

7. Your GDPR Rights

Under UK GDPR legislation, you possess several rights regarding your personal data:

  • Right of Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can ask us to correct inaccurate or incomplete data.
  • Right to Erasure (Right to be Forgotten): You can easily delete your account and request that all your data be permanently deleted from our servers.
  • Right to Data Portability: You have the right to request an export of your business and customer data in a structured, commonly used format.
  • Right to Object: You can object to our processing of your personal data.

To exercise any of these rights, please contact us at utroffrosant17@gmail.com. We will respond to all valid requests within one calendar month.

8. Cookie Policy

PlumbFlow uses a minimal necessity approach to cookies. We do not use analytical, tracking, or advertising cookies on the platform. We strictly use essential/functional cookies to:

  • Keep you logged in securely (authentication cookies).
  • Remember basic platform preferences.
  • Enhance the performance of our Progressive Web App.

By using the PlumbFlow platform, you consent to the use of these strictly necessary cookies.

9. Contact Us

If you have any questions about this Privacy Policy, your rights, or how your data is handled, please contact our Data Protection representative:

U-Flow Solutions (PTY) LTD
Email: utroffrosant17@gmail.com