Privacy Policy

Karma Miami Inc. ("SiteFlow," "we," "us," or "our") operates the SiteFlow platform and related services (collectively, the "Service"). This Privacy Policy describes how we collect, use, disclose, and protect information about you when you use our Service.

By using SiteFlow, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

This Privacy Policy applies to information we collect through our website, mobile applications, and any other services that link to this policy.

2.1 Information You Provide

• Account Information: Name, email address, phone number, company name, and password when you register
• Business Information: Company details, logo, business address, license numbers, and tax information
• Client Data: Information about your clients that you enter into the system (names, contact details, project information)
• Financial Information: Payment details for subscription services (processed by Stripe)
• Communications: Messages you send to us or through the Service
• Content: Quotes, invoices, project details, and other documents you create

2.2 Information Collected Automatically

• Usage Data: How you interact with the Service, features used, pages visited
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, referring URLs
• Location Data: General geographic location based on IP address
• Cookies: As described in Section 9 below

2.3 Information from Third Parties

• Authentication providers (e.g., Google, if you sign in with Google)
• Payment processors (Stripe) regarding payment status
• Analytics providers

We use the information we collect for the following purposes:

Service Delivery

• Provide, maintain, and improve the Service
• Process your transactions and manage your account
• Enable features such as quote generation and project management
• Power AI features (your data may be processed by AI systems)

Communications

• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Send marketing communications (with your consent where required)

Analytics & Improvement

• Monitor and analyze usage patterns and trends
• Develop new products, services, and features
• Improve our AI models and recommendations

Security & Legal

• Detect, prevent, and address fraud and security issues
• Comply with legal obligations
• Enforce our Terms of Service

We do not sell your personal information.We may share your information in the following circumstances:

Service Providers

We share information with third-party vendors who perform services on our behalf, including:

• Stripe: Payment processing
• Clerk: Authentication services
• OpenAI: AI features (data sent to AI models)
• Vercel: Hosting and infrastructure
• Supabase: Database services
• Analytics providers: Usage analytics

Legal Requirements

We may disclose information if required by law or in response to:

• Subpoenas, court orders, or legal process
• Government requests
• To protect our rights, privacy, safety, or property
• In connection with an investigation of suspected illegal activity

Business Transfers

If SiteFlow is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

With Your Consent

We may share information with third parties when you give us explicit consent to do so.

We implement appropriate technical and organizational security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication systems
• Regular security assessments
• Access controls limiting who can access your data
• Secure cloud infrastructure (SOC 2 compliant providers)

Important: While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

We retain your information for as long as your account is active or as needed to provide you services. We may also retain and use information as necessary to:

• Comply with legal obligations
• Resolve disputes
• Enforce our agreements
• Support business operations

Account Deletion: You may request deletion of your account and associated data by contacting us. Some information may be retained as required by law or for legitimate business purposes.

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request your data in a portable format
• Opt-out: Opt out of marketing communications
• Withdraw Consent: Where processing is based on consent

To exercise any of these rights, please contact us at privacy@siteflow.app. We will respond to your request within 30 days.

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about what personal information we collect, use, and disclose
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell personal information, so this right does not apply
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

Categories of Information Collected: Identifiers, commercial information, internet activity, geolocation data, and professional information.

To submit a CCPA request, contact us at privacy@siteflow.app or call [phone number].

We use cookies and similar tracking technologies to:

• Essential Cookies: Required for the Service to function (authentication, security)
• Analytics Cookies: Help us understand how you use the Service
• Preference Cookies: Remember your settings and preferences

Managing Cookies: Most browsers allow you to control cookies through their settings. However, disabling certain cookies may affect the functionality of the Service.

Do Not Track: We do not currently respond to "Do Not Track" signals.

Our Service is not directed to children under 18 years of age. We do not knowingly collect personal information from children under 18. If we discover that we have collected information from a child under 18, we will delete that information promptly.

If you believe we have collected information from a child under 18, please contact us immediately at privacy@siteflow.app.

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we ensure that transfers to the United States are protected by appropriate safeguards, such as Standard Contractual Clauses.

By using our Service, you consent to the transfer of your information to the United States and other countries.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

For material changes, we will provide more prominent notice (such as email notification or a notice on our Service). We encourage you to review this Privacy Policy periodically.

Your continued use of the Service after any changes indicates your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For CCPA-specific requests, you may also contact us toll-free at: [phone number]