Legal

Privacy Policy

How we collect, use, and protect your data.

Last updated: 1 January 2025

This Privacy Policy explains how Fluxo ("we", "us", "our") collects, uses, and protects information about you when you use our property portfolio management platform at fluxo-os.com.

1. Who we are

Fluxo is a UK-based software service for property landlords. Our registered address is available on request at hello@fluxo-os.com. We are the data controller for the purposes of UK GDPR.

2. What data we collect

Account data

When you create an account we collect your name, email address, and password (stored as a secure hash). If you sign in via Google, we receive your name and email from Google.

Property and portfolio data

Data you enter about your properties, tenants, finances, documents, maintenance records, and tasks. This data belongs to you and is stored securely in our database.

Usage data

We collect anonymised information about how you use the platform — which features you use, how often, and general performance data. This never includes the content of your property or tenant records.

Payment data

Subscription payments are processed by Stripe. We do not store your card details. Stripe's privacy policy applies to payment processing.

Communications

If you contact us by email or through our contact form, we retain that correspondence to respond to you and improve our service.

3. How we use your data

We do not use your data for advertising. We do not sell your data to third parties.

4. Legal basis for processing

We process your data on the following legal bases under UK GDPR:

5. Data storage and security

Your data is stored on servers operated by Supabase, which uses PostgreSQL with row-level security. All data is encrypted at rest using AES-256 and in transit using TLS 1.3. We implement row-level security so that no user can access another user's data.

We take security seriously. If we become aware of a data breach that affects you, we will notify you and the ICO as required by law.

6. Data retention

We retain your data for as long as your account is active. If you cancel your subscription, your data remains accessible for 30 days, after which it is permanently deleted from our systems. You can request immediate deletion at any time by contacting us.

7. Your rights

Under UK GDPR you have the right to:

To exercise any of these rights, contact us at hello@fluxo-os.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use essential cookies to keep you logged in and remember your preferences. We do not use advertising or tracking cookies. See our Cookie Policy for full details.

9. Third-party services

We use the following third-party services:

ServicePurposePrivacy policy
SupabaseDatabase and authenticationsupabase.com/privacy
VercelHostingvercel.com/legal/privacy-policy
StripePayment processingstripe.com/gb/privacy
GoogleOAuth login (optional)policies.google.com/privacy

10. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by email or by a notice in the platform. Continued use of Fluxo after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions, contact us at hello@fluxo-os.com.