Privacy Policy

1. Introduction

This Privacy Policy explains how TailorFlow collects, uses, stores, and discloses personal data when you access or use our websites, products, forms, imported landing pages, AI personalization features, and related services.

TailorFlow is operated by GROWTH SYNERGY CONSULTING, SAS, SIREN 934 886 870, registered office at 6 RUE D'ARMAILLE, 75017 PARIS, France. In this policy, "TailorFlow", "we", "us", and "our" refer to GROWTH SYNERGY CONSULTING acting through the TailorFlow service.

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date. Continued use of TailorFlow after a policy update means that the updated policy applies to your use of the service.

This policy is provided for transparency and product operation. It is not a substitute for legal advice, and customers should review their own privacy obligations before collecting personal data through TailorFlow forms.

2. Information we collect from customers

When you create or use a TailorFlow account, we may collect account and profile information such as your name, email address, company name, public subdomain, subscription tier, subscription status, support requests, preferences, and authentication data.

We collect and store the forms, flows, questions, templates, qualification rules, imported landing pages, uploaded files, custom domains, webhook settings, analytics settings, and other configuration data you create in TailorFlow.

We also store generated landing-page content, AI configuration, imported HTML/CSS/assets, personalization variables, and related metadata needed to operate the product and make your flows editable and publishable.

3. Billing and payment information

TailorFlow uses Lemon Squeezy for checkout, payment processing, subscription/order handling, tax handling, and related billing operations. We do not store full credit card numbers in our application database.

We may store payment-related metadata such as your billing provider, customer identifier, order identifier, product or variant identifier, subscription tier, subscription status, and payment confirmation status so we can unlock paid features and support your account.

Payment information you enter during checkout is processed by Lemon Squeezy and its payment infrastructure under their own terms and privacy practices.

4. Log data, cookies, analytics, and public page visitors

When you or visitors interact with TailorFlow, our systems may collect technical information such as IP address, browser type, device type, operating system, referring page, timestamps, request metadata, cookie data, and general usage events.

TailorFlow uses essential cookies and local identifiers for authentication, session management, public-form visitor continuity, partial submission recovery, security, and service reliability. Some features may not work correctly if essential cookies are disabled.

We use product analytics to understand how customers use TailorFlow, improve onboarding, measure feature usage, debug issues, and improve reliability. Our product analytics setup is configured to avoid sending lead answers, lead emails, imported HTML/CSS, AI prompts, or other sensitive lead content.

On public forms and generated pages, optional analytics start only after acceptance. You may reject them and still complete the quiz, or withdraw through Privacy choices. Consented events include views, starts, completions, results and CTA clicks, acquisition source and approximate country supplied by Cloudflare from the request IP. Full text and contact answers are not sent to PostHog; categorical answers may contribute to distributions.

A separate random analytics identifier recognizes a browser only within one customer and domain. It expires after at most 180 days without automatic extension, and is not derived from IP, email, phone or fingerprinting. The acceptance or refusal is remembered for up to 180 days. Unique visitors are an estimate of recognized browsers, not verified people. Functional quiz recovery is separate and is not used to reconstruct analytics identities.

5. User content, imported pages, uploaded files, and generated content

You are responsible for the content you upload, import, publish, or generate through TailorFlow. This may include landing-page copy, images, logos, form questions, imported page assets, custom HTML/CSS, domain names, webhooks, and generated AI copy.

When you import a landing page, TailorFlow may fetch and process publicly available HTML, CSS, images, fonts, scripts, links, copy, colors, sections, and metadata to recreate an editable landing page and generate a related form flow.

When you use AI features, TailorFlow may send relevant form configuration, imported page context, customer-provided business context, and lead answers to AI providers so that the requested forms, questions, page copy, and personalized landing-page content can be generated.

You should not upload, import, or publish content unless you have the rights and lawful basis to use it.

6. Lead Data and customer responsibilities

TailorFlow lets customers create public forms and collect information from visitors or prospects. We refer to this information as "Lead Data". Lead Data may include names, emails, phone numbers, business details, goals, challenges, budget information, uploaded files, answers to qualification questions, partial submissions, and other information selected by the customer.

For Lead Data, the TailorFlow customer decides what to collect, why it is collected, how it will be used, and how long it should be retained. The customer is the controller of that Lead Data under applicable data protection laws, including the GDPR where relevant.

TailorFlow processes Lead Data on behalf of the customer to provide form hosting, partial submission recovery, AI personalization, generated landing pages, analytics, exports, email notifications, webhook delivery, security, support, and related product functionality.

Customers are responsible for providing their own privacy notices, obtaining any required consent, honoring data subject requests relating to their leads, and using Lead Data lawfully.

7. How we use information

We use personal data and service data to provide, maintain, secure, troubleshoot, and improve TailorFlow; create and manage accounts; authenticate users; process payments; deliver transactional emails; provide support; generate AI content; import pages; publish forms and generated pages; deliver webhooks; and provide analytics to customers.

We may use account and usage data to understand product adoption, improve onboarding, prioritize features, detect abuse, prevent fraud, protect TailorFlow and its users, enforce our terms, comply with legal obligations, and communicate important service notices.

We may send product, onboarding, support, billing, security, and service-related communications. Where required, marketing communications will include a way to opt out. Essential service, billing, security, and account notices may still be sent while you maintain an account.

8. How we disclose information

We do not sell personal data. We disclose personal data only as needed to operate TailorFlow, follow customer instructions, comply with law, protect rights and security, or complete a business transaction such as a merger, acquisition, financing, or sale of assets.

We use service providers that help us provide TailorFlow. These include Convex and Convex Auth for database and authentication; Cloudflare R2 for file storage; OpenAI for AI generation and personalization; Lemon Squeezy for checkout and billing; Maileroo for transactional email; PostHog EU for analytics; Cloudflare for domains, security, approximate country detection and delivery; and Railway for application hosting.

Service providers may process personal data only to provide services to TailorFlow, subject to appropriate contractual, technical, and organizational safeguards. We may also disclose aggregated or anonymized data that is not associated with an identifiable person.

9. International transfers

TailorFlow is operated from France and may use service providers located in the European Union, the United States, and other countries. Personal data may therefore be processed outside your country of residence.

Where personal data from the EU/EEA, United Kingdom, or Switzerland is transferred internationally, we rely on appropriate safeguards where required, such as Standard Contractual Clauses, adequacy decisions, data processing agreements, and other lawful transfer mechanisms.

10. Your rights and choices

You may access and update certain account information through TailorFlow settings. You may also delete your account from settings, which removes your forms, responses, analytics events, uploaded files, custom domain records, and profile data from the active application database, subject to operational backups, legal obligations, fraud prevention, and security requirements.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data. You may also have the right to withdraw consent where processing is based on consent, and to lodge a complaint with a data protection authority.

If your request relates to Lead Data collected by a TailorFlow customer, we may direct you to that customer because they control the Lead Data. We will support customers in responding to valid requests where required and technically possible.

11. Data retention

We retain account, service, billing, analytics, and Lead Data for as long as needed to provide TailorFlow, comply with legal obligations, resolve disputes, enforce agreements, prevent abuse, and maintain security.

Customers may delete flows, responses, uploaded files, and their account from within the product where supported. Deleted data may remain for a limited period in backups, logs, or security records before being removed according to our operational retention practices.

12. Links and third-party websites

TailorFlow may contain links to third-party websites, customer websites, imported pages, custom domains, payment pages, or external services. We are not responsible for the privacy practices, content, or security of third-party websites. You should review their privacy policies before providing personal data.

13. Business transfers

If TailorFlow or GROWTH SYNERGY CONSULTING is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, personal data and service data may be transferred as part of that transaction, subject to this Privacy Policy and applicable law.

14. Security

We use technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, and disclosure. No internet service can be guaranteed to be completely secure, and you are responsible for keeping your account credentials confidential.

If you believe your account or data has been compromised, contact us promptly at [email protected].

15. Children's privacy

TailorFlow is not directed to children under 16, and we do not knowingly collect personal data from children under 16. If you believe a child has provided personal data to TailorFlow, contact us and we will take appropriate steps to delete the information where required.

16. Contact us

If you have questions about this Privacy Policy, want to exercise privacy rights, or need information about our data practices, contact us at [email protected].

Operator: GROWTH SYNERGY CONSULTING, SAS, SIREN 934 886 870, 6 RUE D'ARMAILLE, 75017 PARIS, France.