This page explains everything you need to know about your privacy and security while visiting our website spotflow.io. In particular, we (Spotflow, s.r.o., company registration number: CZ19630735, registered in the Commercial Register of the Czech Republic, maintained by the Municipal Court in Prague, section C, entry no. 389453, with its registered seat at Banskobystrická 2080/11, Dejvice, 160 00 Praha, the Czech Republic), want to inform you how we process your personal data and what rights you have in this respect. We also want to assure you that we take personal data protection very seriously and we do our best to comply with all applicable legislation, such as the GDPR. If you do not agree with the data practices described in this Privacy Policy, you should not use our website.
In order for us to be able to provide you with high-quality services, we need to collect and process information about you. We may do so in the following ways:
If you contact us by using the contact form on our website, you may need to provide us with your name, e-mail address, name of your company, and the content of your question (request). In the follow-up, we may ask for further information necessary for answering your question (e.g., technical details related to your electronic devices).
The information you provide through these contact forms, including any personal data, may be stored in Posthog, a third-party service provider that we use for website analytics. We take appropriate measures to protect the confidentiality and security of the information collected. Here is more information on Posthog's privacy practices.
We use CRM Instantly, where we store data for marketing and sales purposes. If you want to know how they process personal data on our behalf, you should read the Instantly Privacy Policy..
We also process incoming requests received via email for the purpose of responding to inquiries, providing customer support, and addressing other communication needs. The information shared with us via email, including any personal data provided by the sender, may be stored in our email inboxes for record-keeping purposes and to facilitate ongoing communication. We take appropriate measures to protect the confidentiality and security of email communication.
We use Stripe, a payment processing platform, to facilitate payments for products and services you order from us. Stripe may collect “transaction data” that are needed to process your payment, such as your name, email address, and card number. If you are interested in Stripe’s approach to personal data protection, you may find their privacy policy.
We use Auth0 Auth0 for authentication and authorization of accounts registered to the platform. Auth0 collect email needed to register your account to the platform. If you are interested in Auth0’s approach to data protection, you may find their privacy and compliance.
If you use single sign-on (hereinafter “SSO”) to login into the platform, we provide your email address to the identity provider of your choice [e.g. Microsoft, Google, Github, LinkedIn, or X (formerly Twitter)] to validate your credentials. If the identity provider asks you to authenticate (e.g. with your user name and password), the authentication process is managed by the identity provider and according to their rules, including their respective privacy policies. We do not receive nor do we process your credentials with the identity provider (e.g. the password to your Google account).
When you use our website, we and service providers acting on our behalf automatically record information that your device or browser sends out (hereinafter “the Log Data”).
The Log Data may include information such as:
We may combine the Log Data with other information we collect or have about you.
For processing the Log Data, we use Google Analytics (including Google Analytics Demographics and Interest Reporting), which is a web analysis service provided by Google. Google utilizes the Log Data collected to track and examine the use of our website, prepare reports on users’ activities and share them with other Google services. Google may use the Log Data collected to contextualize and personalize the ads of its own advertising network. If you are interested in Google’s approach to personal data protection, you may find more in Google Privacy Policy and Data Protection.
We use reCAPTCHA, a security feature provided by Google, to protect against automated spam and abuse on our website. reCAPTCHAcollects certain information about user interactions with our website, such as IP address, browser type, and cookies (for more information about cookies, see section C below), in order to determine whether a user is a human or a bot. Google can also use this information in order to improve its reCAPTCHA services. If you are interested in Google's approach to personal data protection, you may find more in Data Protection and Privacy Policy. You can learn more technical details about reCAPTCHA on Google's web developer page.
We use Posthog, an analytics software, to collect information about visitors' behavior on our website. Posthog may collect and process personal data, such as browser information, website usage information, the name of the owner of the IP address, the reverse domain of the IP address, and others, in order to track website engagement. Posthog may also use cookies (for more information about cookies, see section C below). This information may be used to improve our marketing efforts and provide a better user experience. If you are interested in Posthog's approach to personal data protection, you may find their privacy policy.
2.3. Information collected from cookies
Our service providers use cookies or similar technologies to collect information relating to you and your use of our website. Cookies are small files that enable storing and collecting specific information related to you and your use of our website. Cookies assist us in improving our website and tailoring it to your needs.
We use the opt-in method of cookie consent (also known as explicit consent), which means that cookies or tracking technologies are not set or used by default when you visit the website unless you have explicitly provided your consent by clicking the “Accept” button. We use four categories of cookies on our website: essential (or technical) cookies, analytical cookies, marketing cookies, and personalization cookies.
As can be seen from the previous section, there are numerous reasons for processing your personal data. These reasons result in the following legal grounds justifying the data processing that we do:
Generally, we do not share any personal information with third parties unless you give us prior consent.
We may share your personal information with public authorities when the law requires us to do so. In such cases, we share only the information that we have to, and we communicate with the concerned users as soon as allowed.
We may also disclose personal information in order to identify, contact, or bring legal action against a person or entity who may be causing us harm or endangering our interests.
If we are involved in a corporate reorganization (e.g., acquisition, merger, asset sale), personal information may be transferred to the acquiring entity and become subject to a different privacy policy. Before the data transfer, we will give you a notice and option to opt out of the transfer.
We store your personal data for as long as required by the purpose they have been collected for. More specifically:
You may be entitled to exercise some or all of the following rights free of charge (such rights may vary depending on various factors, e.g. on the way how we collected your personal information):
You may exercise the rights referred to above or ask any questions or make any complaints regarding the data processing by contacting us. You also have the right to bring a claim before the competent data protection authority.
If you have any additional questions or concerns about our Privacy Policy, please email us at info@spotflow.io or send a letter to Spotflow, s. r. o, Vítězné náměstí 577/2, Dejvice, 160 00 Praha 6, the Czech Republic.