Privacy Policy

• Account and organization data: names, email addresses, authentication identifiers, membership records, and organization settings.
• Campaign and submission data: campaign configuration, uploaded media, contributor contact details, optional order identifiers, review decisions, and reward metadata.
• Payment and billing data: billing records, payment references, usage events, invoice metadata, and limited provider status details.
• Technical and analytics data: browser/device signals, event telemetry, coarse location derived from request metadata, and salted IP hashes for reliability and abuse prevention.
• Support communications: messages sent to RewardFlow support and the information needed to respond.

• Provide, secure, maintain, and improve the RewardFlow platform.
• Authenticate users, manage organizations, and protect accounts from abuse.
• Process submissions, approvals, payouts, notifications, and usage-based billing.
• Generate protected previews, operational emails, analytics, and support responses.
• Comply with legal obligations and enforce our terms and platform policies.

We share information with service providers that help us operate RewardFlow, including hosting, storage, authentication, payments, rewards, email delivery, analytics, and infrastructure providers. We may also disclose information when required by law, to protect rights and safety, or as part of a business transfer.

RewardFlow is designed around private file storage. Uploaded objects are not public, and access is mediated through signed upload policies or signed preview URLs. We use administrative, technical, and organizational safeguards intended to protect personal information.

We retain information for as long as needed to provide the service, support customer workflows, maintain business records, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods can vary by data type, account status, campaign state, and provider requirements.

You may request access, correction, deletion, or export of personal information by contacting support. Some records may need to be retained where required for security, billing, legal compliance, dispute resolution, or legitimate operational purposes.

Privacy questions and requests can be sent to support@rewardflow.io.