Privacy Policy
Last updated: 30 July 2026
Data Controller
Flow HQ Ltd, trading as Flow, is the controller responsible for the personal data described in this Privacy Policy. Flow HQ Ltd is a private company limited by shares registered in England and Wales under company number 17370799. Its registered office is 8 Coopers Loft, London, SW18 1UJ, United Kingdom.
If you have any questions about this Privacy Policy, please contact us at:
Scope
This Privacy Policy explains how we collect, use and protect your personal information when you use Flow.
It applies whenever you:
- create an account;
- complete your profile;
- request a withdrawal;
- upload supporting information;
- contact us.
Information We Collect
Account Information
We may collect:
- name
- email address
- encrypted authentication credentials
Authentication is securely managed by Supabase.
Profile Information
You may provide:
- date of birth
- residential address
- phone number
- TikTok Shop information
- bank account details
Withdrawal Information
When requesting a withdrawal we collect:
- available earnings entered
- requested withdrawal amount
- uploaded screenshots
- withdrawal status
- timestamps
Technical Information
We automatically collect limited technical information including:
- IP address
- browser type
- device information
- authentication logs
Why We Use Your Information
We use your information to:
- provide Flow's services;
- assess withdrawal requests;
- prevent fraud;
- communicate with you;
- improve Flow;
- comply with legal obligations.
Legal Basis
We process personal information because:
- it is necessary to provide our service;
- we have legitimate interests in preventing fraud and improving Flow; or
- we are required to comply with legal obligations.
Service Providers
We currently use trusted third-party providers including:
Supabase
Authentication, database hosting and secure file storage.
Vercel
Website hosting and deployment.
Resend
Delivery of transactional emails, such as withdrawal request confirmations and status updates.
These providers process data on our behalf.
International Transfers
Some service providers may process personal information outside the United Kingdom.
Where this happens, we take reasonable steps to ensure appropriate safeguards are in place.
Data Retention
| Data | Retention |
|---|---|
| Active accounts | While your account remains open |
| Declined withdrawals | Up to 12 months |
| Uploaded evidence | Deleted when no longer required for underwriting, fraud prevention or legal compliance (normally within 12 months) |
| Support correspondence | As reasonably necessary |
Security
We take reasonable technical and organisational measures to protect your personal information.
However, no online service can guarantee absolute security.
Your Rights
You may request to:
- access your information;
- correct inaccurate information;
- delete information where legally permitted;
- object to certain processing;
- receive a copy of your personal data.
Please email:
Complaints
If you have a concern about how we handle your personal data, please contact us first at hello@letsflow.money or by post to Flow HQ Ltd, 8 Coopers Loft, London, SW18 1UJ, United Kingdom, so we can try to resolve it.
You also have the right to complain to the UK Information Commissioner's Office (ICO) at any time, particularly if you are unhappy with how we have handled your complaint. The ICO can be contacted at ico.org.uk.
Changes
We may update this Privacy Policy from time to time.
Any updates will be published on this page with a revised "Last updated" date.
This Privacy Policy reflects Flow's current early access service and may change as the product evolves.