Effective Date: January 1, 2025
This Privacy Policy describes how CubiFlow (“we”, “our”, or “us”) collects, uses, shares, and protects personal and business information when you engage with us, use our services, or visit our website https://www.cubiflow.com.
By accessing our website or engaging our services, you agree to this Privacy Policy.
1. Information We Collect
We may collect the following information:
a. Personal Identification Information
- Full name
- Email address
- Phone number
- Company name
- Billing and mailing address
- Payment method (bank or PayPal – no card data stored directly by us)
b. Business & Project Information
- Branding assets, project brief, content, and references
- Login credentials (only if provided voluntarily for integration work)
- Feedback, communication history, and revision requests
c. Technical Data (Collected via Website)
- IP address, device information, browser type
- Pages viewed, time spent on site, referral source
- Cookies and usage analytics (via tools like Google Analytics)
We do not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, or biometric data.
2. How We Use Your Information
We use your information only for legitimate business purposes, including but not limited to:
- Communicating with you regarding your project or inquiry
- Delivering our design and development services
- Creating project proposals, invoices, and contractual documents
- Providing technical support or maintenance
- Maintaining internal business records and legal compliance
- Improving our services, website, and customer experience
- Sharing success stories or project screenshots in our portfolio (with or without explicit attribution, unless otherwise agreed)
We may retain basic client information for future service offers or updates, unless you request to opt out.
3. Legal Basis for Processing (For Clients in EU/EEA)
If applicable, we process personal data under the following legal bases:
- Contractual necessity – to fulfill service obligations
- Legal obligation – for recordkeeping and tax compliance
- Legitimate interests – such as improving services and portfolio display
- Consent – where explicitly required
4. Information Sharing and Disclosure
We will never sell, rent, or trade your information.
We may share data with:
- Payment processors (e.g., PayPal, Stripe)
- Cloud storage services (e.g., Notion, Google Drive)
- Email and communication platforms (e.g., Gmail, Slack, Calendly)
- Legal or government authorities when legally required
- Subcontractors or collaborators under NDA, if needed to complete your project
We ensure that all third parties are contractually obligated to protect your data.
5. Data Retention
We retain personal and project information for as long as needed to:
- Complete the project
- Fulfill legal and contractual obligations
- Defend ourselves in potential legal claims
- Maintain accurate business records
We may delete or anonymize data after a reasonable period of inactivity (e.g., 2 years) unless otherwise required.
6. Your Responsibilities
You are responsible for:
- Providing accurate and legal content, assets, and materials
- Ensuring you have rights or licenses to all media/content shared with us
- Not sharing passwords or credentials unless absolutely necessary
- Informing us promptly of any data or content you wish to be deleted
We are not liable for any content violations resulting from materials you provide.
7. Data Security
We take reasonable steps to protect your data using:
- Password-protected devices and platforms
- Secure storage tools (e.g., Google Workspace, Notion)
- Encrypted communication when applicable
- Access restrictions within our team
However, we cannot guarantee 100% security, especially for data transmitted over the internet. You agree to accept this inherent risk.
8. Cookies and Website Analytics
Our website uses cookies to:
- Analyze user traffic and behavior
- Improve website performance and usability
- Monitor marketing effectiveness
You can disable cookies in your browser settings at any time. By using our site, you consent to our use of cookies.
9. International Data Transfers
If you are located outside Vietnam, your data may be transferred to and stored in countries that may not offer the same level of data protection. By using our services, you consent to this transfer.
10. Third-Party Tools & Links
We may link to third-party websites or tools (e.g., Webflow, Memberstack, Stripe, Calendly). We are not responsible for their content or privacy practices. Please review their privacy policies separately.
11. Your Rights
Subject to applicable laws, you have the right to:
- Request access to the data we hold about you
- Request correction or deletion of your personal data
- Withdraw consent for non-essential communications
- Lodge a complaint with a data protection authority if you believe your rights were violated
To exercise these rights, email us at: hello@cubiflow.com
12. Limitation of Liability
We shall not be held liable for:
- Data breaches caused by third-party tools or services
- Data loss caused by misuse, user error, or expired credentials
- Any claims resulting from unauthorized or illegal content provided by you
- Data lost after the project is considered complete and closed (per our Terms & Conditions)
13. Changes to This Policy
We reserve the right to update this Privacy Policy at any time. All changes will be published on this page with the revised date. Continued use of our services implies your acceptance of the updated policy.