Privacy Policy

This policy applies to RewardFlow websites, merchant dashboards, hosted or embedded submission surfaces, contributor status pages, communications, and related services. Muehleip Tech LLC d/b/a RewardFlow is responsible for account, billing, security, support, and service-operation information. For campaign submissions, the organization running the campaign determines what it requests and how approved content will be used; RewardFlow processes that information to provide the service on the organization's behalf.

Organizations may provide additional privacy notices or content terms. Contact the organization shown in a campaign for questions about its campaign instructions, approval decision, marketing use, or request to stop future use of content.

• Account and organization data: names, email addresses, authentication identifiers, membership records, and organization settings.
• Campaign and submission data: campaign configuration, uploaded media, contributor names and contact details, optional order identifiers, notes, eligibility confirmations, review decisions, and reward metadata.
• Payment and billing data: billing records, payment references, usage events, invoice metadata, and limited provider status details.
• Technical and analytics data: browser/device signals, event telemetry, coarse location derived from request metadata, referring or campaign surfaces, and salted IP hashes for reliability, attribution, analytics, and abuse prevention.
• Support communications: messages sent to RewardFlow support and the information needed to respond.

• Provide, secure, maintain, and improve the RewardFlow platform.
• Authenticate users, manage organizations, and protect accounts from abuse.
• Process submissions, approvals, payouts, notifications, and usage-based billing.
• Generate protected previews, operational emails, analytics, and support responses.
• Record campaign and contributor eligibility, permissions, and consent choices.
• Comply with legal obligations and enforce our terms and platform policies.

We share information with service providers that help us operate RewardFlow, including hosting, storage, authentication, payments, rewards, email delivery, analytics, and infrastructure providers. We may also disclose information when required by law, to protect rights and safety, or as part of a business transfer.

Campaign submissions and contributor details are available to the organization running the campaign and its authorized users. Reward and payment providers receive the information reasonably needed to process the applicable transaction. We do not authorize service providers to use submission content for their own unrelated advertising.

RewardFlow's current service does not support patient content, medical or dental records, diagnoses, treatment, clinical care, prescriptions, insurance information, or other sensitive health information. Please do not submit that information. If prohibited information is submitted, we may restrict access, preserve limited evidence as required for security or legal purposes, notify the applicable organization, and delete or quarantine the information as appropriate.

RewardFlow is not directed to children or teenagers. Merchant users and contributors must be at least 18 years old, and submitted content must not identify or depict anyone under 18. Contact us if you believe an ineligible minor's information was submitted.

RewardFlow is designed around private file storage. Uploaded objects are not public, and access is mediated through signed upload policies or signed preview URLs. We use administrative, technical, and organizational safeguards intended to protect personal information.

We retain information for as long as needed to provide the service, support customer workflows, maintain business records, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods can vary by data type, account status, campaign state, and provider requirements.

Campaign and submission records may be retained while a campaign, review, reward, billing, fraud, dispute, or content-use workflow remains active. Private media may have shorter cleanup periods when a submission is abandoned, rejected, canceled, or expired. Backups and legally required business records may remain for a limited additional period.

You may request access, correction, deletion, or export of personal information by contacting support. Some records may need to be retained where required for security, billing, legal compliance, dispute resolution, or legitimate operational purposes.

Depending on where you live and applicable law, you may have additional rights to know, access, correct, delete, or obtain a copy of personal information, or to appeal a privacy-request decision. We may need to verify your identity and may direct campaign-use questions to the organization responsible for that campaign. Authorized agents may submit requests where permitted by law.

The launch service is intended for organizations and contributors in the United States. RewardFlow and its providers process and store information in the United States. Do not use the service if the current U.S. launch scope does not apply to you.

Privacy questions and requests can be sent to Muehleip Tech LLC d/b/a RewardFlow at support@rewardflow.io.