Privacy Notice

This notice covers BimFlow accounts, self-serve businesses, and customers who submit booking requests. It is approved by the BimFlow founder for production publication and is not represented as attorney-reviewed, regulatory-approved, or legal advice. The exact version identifier is retained with the user's acceptance.

• Business account information, including owner or contact details, business profile, services, business-selected currency and prices, hours, deposit instructions, and customer-facing policies.
• Booking information supplied by a customer, such as name, contact details, requested service, appointment time, notes, and booking status.
• Payment-proof files a customer chooses to upload for review by the service business. Proofs may contain personal or transaction information and are treated as private.
• Limited redacted operational and security records needed to run, protect, troubleshoot, recover, and support the service, including abuse-prevention signals.

BimFlow uses information to create and manage booking requests, show the correct business information, let the business review proof and confirm or reject a request, support account access, prevent abuse, investigate incidents, recover service, and operate the booking workflow. BimFlow does not sell participant or customer data.

Payment proofs are not public. Access is intended only for the submitting customer through a narrowly scoped recovery capability and for the authorized business owner responsible for that booking. Participants must not request or upload unnecessary identity documents, account credentials, full card information, health information, or other unrelated sensitive data.

BimFlow relies on approved infrastructure providers to host the application, database, authentication, private file storage, monitoring, transactional email, abuse protection, and encrypted backups. Information may be disclosed when reasonably required to operate those services, respond to a security event, comply with applicable legal obligations, or protect users and the platform. Provider, transfer, and controller details remain subject to the final legal review.

BimFlow uses limited page-view analytics and redacted operational monitoring. It does not use session replay. Monitoring and analytics must not record payment proofs, booking-recovery capabilities, secrets, authorization headers, customer communications, or unnecessary personal data.

Payment-proof files are retained for 90 days by default. Longer retention is limited to a documented dispute, legal hold, fraud investigation, or security incident. Other information is retained only as long as needed for the booking workflow, security, recovery, account support, and applicable obligations. Access controls, private storage, tenant isolation, encryption in transit, and encrypted backups are used as safeguards, but no system can promise absolute security.

A business or customer may ask the participating business or use the available BimFlow support channel for access, correction, export, or deletion requests. Requests are subject to reasonable identity checks, applicable exceptions, and applicable response periods.

BimFlow may update this notice when the service, providers, or legal requirements change. Material changes require a new version and, where required, renewed acceptance before a business can publish or remain active.