Policy Center
Privacy Policy
Last updated July 22, 2026
Overview
This Privacy Policy explains exactly what data Pullyflow collects, how we use it, and the choices you have. It covers the personal data of account holders. Business and contact records you compile inside the product are processed on your behalf and are governed by the Data Processing Agreement.
Account data we collect
When you create an account we collect the details you provide: your name, email address, and company. If you sign up through an opt-in link we also record your marketing consent, the time you consented, and the source (for example, a QR scan), so we can prove opt-in under CAN-SPAM and GDPR.
Billing data we collect
When you subscribe, our PCI-DSS Level 1 payment processor handles your card details and returns a token and subscription status to us. We never see or store full card numbers. We retain your plan, subscription status, and billing events to operate your account.
Usage and technical data we collect
We collect product-usage telemetry (the actions you take, the agents and skills you run, and audit records of those runs), plus technical data such as IP address, browser and device type, and referrer. We use privacy-respecting analytics and do not run third-party ad tracking.
How we use your data
We use your data to provide and operate the Service, process payments, authenticate you and keep you signed in, send service communications, provide support, detect and prevent abuse, and improve features. We do not sell your account data.
Lead and contact data
Records you compile are processed on your behalf as your processor. You control retention and may delete audiences and exported lists at any time. See the Data Processing Agreement and the GDPR page for how erasure and data-subject requests are handled.
Your rights and choices
You can access, correct, export, or delete your personal data. You can delete your entire account from your account settings, which anonymizes your personal data (GDPR erasure) and ends your session. You can also email privacy@pullyflow.com. We honor verified requests within 30 days.
Retention and security
We keep your account data for as long as your account is active and as needed to comply with legal obligations. Data is encrypted in transit and at rest. When you delete your account we anonymize your personal data and retain only a hashed, non-identifying audit record proving the erasure occurred.
Questions about this document? Email privacy@pullyflow.com.