Roles and instructions
For client and project information entered by a customer, the customer determines the purpose of processing and ReportFlow processes the information to provide the service. Customers must have the required rights and instructions from their clients.
Data categories and purposes
Processed data can include account identifiers, project details, client contact information, encrypted Google credentials, selected property identifiers, GSC and GA4 metrics, generated report content, schedules, delivery records, and Stripe subscription identifiers.
- Google access is read-only and limited to connected reporting sources.
- GSC and GA4 metrics are used to generate, store, schedule, export, and email reports.
- Client data is not sold or used to build advertising profiles.
- Access is limited by authenticated workspace membership and role.
Subprocessors and transfers
ReportFlow uses infrastructure, email, payment, monitoring, and configured report-generation providers to operate the service. Provider locations can require cross-border processing, subject to the safeguards available through those providers and applicable agreements.
Stripe processes billing data under its own terms. Google supplies connected reporting data under the customer's Google authorization.
Deletion and assistance
Users can disconnect Google services through the application. ReportFlow will reasonably assist with account-data access or deletion requests and security inquiries, subject to identity verification and applicable retention obligations.
Contact support if your organization requires a signed data processing agreement or additional subprocessor information.
Questions about trust or legal terms?
Contact us and include your workspace name so we can route the request.
[email protected]