Security

Security is central to how we build and run lead systems. This page summarizes the practices we follow to protect information entrusted to Flowaify.

Our approach

We aim to collect only what we need, limit who can access it, and rely on reputable providers for infrastructure and data processing.

Data in transit and at rest

Our website and forms are served over HTTPS, so information you submit is encrypted in transit. Credentials and connection secrets used to run your automations are stored using access-controlled, encrypted storage.

Access controls

Access to client systems and data is limited to team members who need it to deliver your service, protected by authentication and least-privilege principles. We remove access when it is no longer required.

Third-party providers

Your system connects to tools you choose — such as your CRM, email, and messaging providers. Data flows through those platforms under their own security programs. We integrate using scoped access wherever possible.

Your account security

Because the systems we build live in your accounts, your own security settings matter. We recommend strong, unique passwords and enabling multi-factor authentication on every connected tool.

Incident response

If we become aware of a security incident affecting your data, we will investigate promptly and notify affected clients as required by applicable law.

Reporting a vulnerability

If you believe you have found a security issue, please email contact@flowaify.app with details. We appreciate responsible disclosure and will respond as quickly as we can.

Contact

Security questions? Email contact@flowaify.app.