Privacy Policy

FlowPXL (“we”, “us”) operates RestroFlow, a restaurant and café operations platform. We act as the data controller for personal data described in this policy when you use our websites, applications, and related services (the “Service”).

Questions about privacy: hello@flowpxl.com.

Account and profile: name, email, phone (if provided), organisation and outlet details, role, and authentication data.

Service data: orders, menu, floor and table configuration, staff assignments, billing and tax-related records you enter, and operational logs needed to run the Service.

Usage and device: IP address, browser type, pages viewed, timestamps, and similar technical data when you use our sites and apps.

Support and communications: messages you send us and records of support requests.

Marketing site: optional analytics and preference cookies only with your consent (see our Cookie Policy).

Provide, secure, and improve the Service, including authentication, multi-outlet access, and customer support.

Process subscriptions, trials, and billing where applicable.

Send service-related notices (security, product changes, account issues). Marketing email only where permitted by law and your preferences.

Comply with law, enforce our Terms, and protect users and the Service.

Contract: processing needed to provide the Service you signed up for.

Legitimate interests: security, fraud prevention, product improvement, and aggregated analytics on the marketing site (balanced against your rights).

Consent: non-essential cookies and optional marketing where required.

Legal obligation: retention or disclosure when the law requires it.

We use infrastructure and service providers (hosting, email, analytics where consented, payment processors) who process data on our instructions under contracts.

We do not sell personal data. We may disclose data if required by law, to protect rights and safety, or in connection with a merger or acquisition with appropriate safeguards.

Data may be processed in countries other than where you live. Where required, we use appropriate safeguards (such as standard contractual clauses or equivalent mechanisms).

We keep data while your account is active and as needed to provide the Service, resolve disputes, and meet legal obligations. Backup and log retention periods may differ; we delete or anonymise when no longer needed.

We use technical and organisational measures appropriate to the risk (access controls, encryption in transit, monitoring). No method of transmission or storage is completely secure.

Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, port data, and withdraw consent. You may lodge a complaint with a supervisory authority.

To exercise rights, contact hello@flowpxl.com. We may need to verify your identity.

We may update this policy. We will post the new version with an updated date and, where appropriate, notify you through the Service or email.