Last Updated: June 26, 2025

Welcome to BugFlows ("BugFlows," "we," "us," or "our"). We are committed to protecting your privacy and handling your personal data in an open and transparent manner. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information when you visit our website (bugflows.com) and use our services (collectively, the "Services").

Please read this Privacy Policy carefully. By accessing or using our Services, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy and our Terms of Service.

1. Information We Collect

We collect personal information to provide and improve our Services. The types of personal information we may collect include:

1.1. Information You Provide Directly:

• Account Information: When you create an account or use our Services, we may collect your name, email address, company name, and password.
• Payment Information: If you subscribe to paid services, we (or our third-party payment processors) will collect payment information, such as credit card details or other financial account information. BugFlows does not store your full credit card information.
• Communications: If you contact us directly (e.g., via email, support requests), we may receive additional information about you, such as the contents of your message and any attachments you may send us.
• Content You Submit: Information you provide when using our services, such as bug reports, project details, comments, and other content.

1.2. Information We Collect Automatically (Usage Data):

• Log Data: When you use our Services, our servers automatically record information ("Log Data"), including your Internet Protocol (IP) address, browser type and settings, the date and time of your request, how you interacted with our Services, and cookie data.
• Device Information: We may collect information about the device you are using to access our Services, including what type of device it is, its operating system, device settings, application IDs, unique device identifiers, and crash data.
• Usage Information: We collect information about how you use our Services, such as the features you use, the pages you visit, the links you click, and the duration of your activities.
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to track activity on our Services and hold certain information. Please see Section 7 ("Cookies and Tracking Technologies") for more details.

1.3. Information from Third Parties:

• Analytics Providers: We use third-party analytics services, like Google Analytics, to help us understand how users engage with our Services. These services may use cookies and similar technologies to collect information about your use of our Services and report website trends. (See Section 7).
• Authentication Services: If you log in to our Services using a third-party authentication service (e.g., Google, GitHub), we may receive information from that service, such as your name and email address, as permitted by your privacy settings on that service.

2. How We Use Your Information

We use the personal information we collect for various purposes, including:

• To Provide and Maintain Our Services: Including to operate and maintain your account, process transactions, and provide customer support.
• To Improve and Personalize Our Services: To understand how users interact with our Services, develop new features, and personalize your experience.
• To Communicate With You: To send you service-related communications, updates, security alerts, and administrative messages. We may also send you marketing communications if you have opted in (you can opt-out at any time).
• For Security and Fraud Prevention: To monitor and prevent unauthorized access, detect security incidents, and protect against malicious, deceptive, fraudulent, or illegal activity.
• For Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
• For Analytics and Performance Monitoring: To monitor and analyze trends, usage, and activities in connection with our Services.
• With Your Consent: For any other purpose disclosed to you at the time we collect your information or pursuant to your consent.

3. Legal Basis for Processing Personal Information (EEA/UK Users)

If you are an individual in the European Economic Area (EEA) or the United Kingdom (UK), we collect and process information about you only where we have legal bases for doing so under applicable EU and UK laws. The legal bases depend on the Services you use and how you use them. This means we collect and use your information only where:

• We need it to provide you the Services, including to operate the Services, provide customer support and personalized features, and to protect the safety and security of the Services;
• It satisfies a legitimate interest (which is not overridden by your data protection interests), such as for research and development, to market and promote the Services, and to protect our legal rights and interests;
• You give us consent to do so for a specific purpose; or
• We need to process your data to comply with a legal obligation.

If you have consented to our use of information about you for a specific purpose, you have the right to change your mind at any time, but this will not affect any processing that has already taken place. Where we are using your information because we or a third party have a legitimate interest to do so, you have the right to object to that use, though, in some cases, this may mean no longer using the Services.

4. How We Share Your Information

We do not sell your personal information. We may share your personal information in the following circumstances:

• Service Providers: We may share your information with third-party vendors, consultants, and other service providers who perform services on our behalf, such as hosting, data analytics (e.g., Google Analytics), payment processing, email delivery, and customer service. These service providers are authorized to use your personal information only as necessary to provide these services to us.
• Business Transfers: If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, your information may be sold or transferred as part of such a transaction as permitted by law and/or contract.
• Legal Requirements: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, (ii) protect and defend our rights or property, (iii) prevent fraud, (iv) act in urgent circumstances to protect the personal safety of users of the Services, or the public, or (v) protect against legal liability.
• With Your Consent: We may share your information with third parties when we have your explicit consent to do so.
• Aggregated or De-identified Data: We may share aggregated or de-identified information, which cannot reasonably be used to identify you, for various purposes, including research and analysis, and to help our partners understand how users engage with their services.

5. Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

Usage Data is generally retained for a shorter period, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods.

6. Data Security

We implement strong security measures designed to protect your personal information from unauthorized access, use, alteration, or disclosure. These measures include encryption, secure cloud storage (e.g., AWS, Google Cloud), multi-factor authentication, and regular security assessments. However, no internet or email transmission is ever fully secure or error-free, so you should take special care in deciding what information you send to us.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (like web beacons and pixels) to collect and use personal information about you, including to serve interest-based advertising. For further information about the types of cookies and tracking technologies we use, why, and how you can control them, please see our Cookie Policy. (Note: A separate Cookie Policy page should be created and linked here, or this section needs to be more comprehensive).

Currently, we use Google Analytics to monitor and analyze the use of our Service. Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network. You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy

Our website displays a cookie banner that allows you to accept or reject certain types of cookies. You can typically manage your cookie preferences through your browser settings.

Do Not Track: Some web browsers may transmit "Do Not Track" signals to websites with which the browser communicates. Our Services do not currently respond to "Do Not Track" signals.

8. Your Data Protection Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information. These rights may include:

• The right to access: You have the right to request copies of your personal information.
• The right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• The right to erasure (Right to be Forgotten): You have the right to request that we erase your personal information, under certain conditions.
• The right to restrict processing: You have the right to request that we restrict the processing of your personal information, under certain conditions.
• The right to object to processing: You have the right to object to our processing of your personal information, under certain conditions (e.g., for direct marketing purposes).
• The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
• The right to withdraw consent: If we are processing your personal information based on your consent, you have the right to withdraw your consent at any time.
• The right to opt-out of sale or sharing (California Residents): If you are a California resident, you have the right to opt-out of the "sale" or "sharing" of your personal information. BugFlows does not currently "sell" personal information as traditionally defined. However, "sharing" under the CCPA/CPRA can include sharing for cross-context behavioral advertising. We will provide mechanisms to opt-out if our practices change to include such sharing.
• The right to non-discrimination: We will not discriminate against you for exercising any of your data protection rights.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request in accordance with applicable law. We may need to verify your identity before processing your request.

If you are in the EEA or UK, you also have the right to lodge a complaint with a supervisory authority.

8.1. Specific Information for California Residents (CCPA/CPRA)

This section supplements the information contained in our Privacy Policy and applies solely to visitors, users, and others who reside in the State of California.

• Categories of Personal Information Collected: In the preceding 12 months, we have collected the categories of personal information listed in Section 1.
• Business or Commercial Purpose for Collection: We collect personal information for the business and commercial purposes described in Section 2.
• Categories of Sources: We collect personal information from the categories of sources described in Section 1.
• Categories of Third Parties with Whom We Share Information: We may share your personal information with the categories of third parties described in Section 4.
• Your Rights: As a California resident, you have the rights listed above, including the right to know, delete, correct, and opt-out of sale/sharing. To exercise these rights, please contact us at [email protected] or through any other method we may provide on our website. We may require you to provide additional information to verify your identity. You may also designate an authorized agent to make a request on your behalf.

9. International Data Transfers

Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction. If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including personal data, to the United States and process it there. Our service providers may also be located in the United States or other jurisdictions.

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your personal data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information. For transfers of personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission or other legally provided mechanisms.

10. Children's Privacy

Our Services are not directed to individuals under the age of 16 (or a higher age threshold where applicable under local law). We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information. If you believe that a child has provided us with personal information in violation of this Privacy Policy, please contact us at [email protected].

11. Links to Other Websites

Our Services may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this Privacy Policy. We may also provide notice to you in other ways, such as via email or a prominent notice on our Services, if the changes are material.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: [email protected]