In short
We process only what is needed for your Flowbio.link page,
appointments, reservations and orders to work: your email address and the content you add yourself,
the data your visitors send through your page, and in the mobile app a device identifier for
notifications. We do not sell data. You can delete your account yourself at any time (how).
Who processes your data
The controller is Webalpe, Spletne rešitve, Aleksandar Petrović s.p., Gradnikova cesta 69, 4240 Radovljica, Slovenia. For any question about your data write to info@flowbio.link.
Scope
The website flowbio.link, the web app app.flowbio.link and the flowbio.link mobile app for Android and iOS. All three are the same service with the same account.
Data we process
- Account: email address (sign-in by code, no password), name and username, and the content you add to your page yourself: links, services, prices, working hours, images.
- Appointments, reservations and orders your visitors send through your page: the visitor's name, email, phone and message. You are the controller of this data; Flowbio.link processes it on your behalf as a processor.
- Mobile app: a device identifier for notifications (token), app version and device language, used to send you a notification about a new request, a cancellation or a reminder. Notifications can be turned off in the settings.
- Plan payments: handled on the web by Stripe. We never see or store card numbers.
- Usage statistics on the web (Microsoft Clarity, Meta Pixel) to improve the service and measure ads, with your cookie consent.
Why and on what basis
To provide the service you signed up for by opening an account (performance of a contract), send the notifications you enabled, bill your plan, keep the service secure and meet legal obligations. Statistics and ad measurement are based on your consent where required.
Who else sees the data
Services that process data for us, each only for its part of the job:
- Supabase: database and sign-in;
- Vercel: hosting of the app;
- Resend: email delivery (sign-in codes, confirmations, reminders);
- Stripe: plan billing;
- Google Firebase: delivery of push notifications to the phone only, without your other data;
- Microsoft Clarity and Meta: web statistics, with consent.
We do not sell data and do not share it with anyone for marketing purposes.
Retention
For as long as you have an account. Deleting the account deletes your profile, page, appointments, reservations and orders. Invoices are kept as long as the law requires.
Your rights
You have the right of access, rectification, erasure, restriction of processing, portability and objection, and the right to complain to a supervisory authority (in Slovenia: Informacijski pooblaščenec). You can delete your account yourself in Account settings, or write to us at info@flowbio.link.
Visitors of a Flowbio.link page
If you booked an appointment, sent a reservation request or placed an order through someone's Flowbio.link page, your data is used by the owner of that page to answer you and provide the service. We store it on their behalf. For access or deletion contact them, or us at info@flowbio.link.
Children
Anyone aged 13 or over may create an account. The service is not intended for children under 13 and we do not knowingly collect their data. If we learn that we have collected such data, we delete it.
Changes
Changes are published on this page, with the date at the bottom. If a change materially affects how we process data, we will let you know by email before it takes effect.
Last updated: