Privacy Policy
Last updated: October 10, 2026
1. Introduction
AssembleFlow is operated by Assembleflow.io. This policy explains how we collect, use and protect your personal data.
2. Data We Collect
- Name and email address for account registration
- Company and organization details
- Project data entered into the application
- Usage data and activity logs
- Answers that your suppliers submit through an order confirmation or quotation link you send them: the name they type, their notes, delivery dates and prices, and the time of the answer
People who open such a link do not need an account and are not asked for an email address. We store only what they enter on that page, show it to the user who created the link, and use it for no other purpose. The link itself is a long random address: anyone who has it can view the order or quotation it shows and answer it, so send it only to the intended recipient.
3. How We Use Your Data
We use data to provide and maintain AssembleFlow, authenticate users, manage access, send service-related emails (including a notice to the user who sent a link when a supplier has answered it) and improve the application.
4. Data Storage
Our current hosted database configuration stores account and application data in the European Union (Ireland) using Supabase infrastructure.
5. Data Sharing
We do not sell your personal data. We share data with service providers needed to operate AssembleFlow, such as Supabase for the database, Resend for email delivery, Stripe for payment processing, Crisp for the support chat on our website (it receives the messages you send us and the contact details you choose to give), and Google for optional analytics when you have consented. Google may process analytics data in other countries, including through international transfers.
6. Your Privacy Rights (GDPR and US State Laws)
Depending on where you live, including the European Union and United Kingdom (GDPR) and US states with privacy laws such as California, you may have the right to access, correct, delete or receive a copy of your personal data, and to opt out of the sale or sharing of personal data. We do not sell your personal data and do not share it for cross-context behavioral advertising. We will not discriminate against you for exercising these rights. Contact support@assembleflow.io to exercise them. We may need to verify your identity before acting on a request.
7. Cookies
Essential authentication cookies are used so that you can sign in and use the service. They are unaffected by your analytics choice. If you accept analytics cookies, Google Analytics may set _ga and _ga_RV6JT0W8Z6. They are used only for analytics, are set only after consent, and help Google Analytics distinguish returning browsers from first-time browsers and measure pages visited and usage and conversion counts such as sign-ups, checkout starts, subscriptions, BOM imports, and first projects. They are configured to last for up to two years. The legal basis for this analytics processing is your consent. Google is the recipient of analytics data and may process it internationally. You can withdraw consent in by choosing Reject. This removes these analytics cookies and stops new analytics collection; essential authentication cookies remain unaffected.
8. Children
AssembleFlow is a business service. It is not directed to children under 16, and we do not knowingly collect their personal data.
Contact
AssembleFlow · support@assembleflow.io