Last updated: July 2026
Privacy Policy
Your data is yours. Here's how we collect, use, and protect it.
Introduction
RFID Flow ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our part tracking service.
Information We Collect
Information You Provide
- Account information (name, email, password, organization name)
- Billing contact and invoice details (for customers on a paid plan)
- RFID tag data and part information you enter
- Zone and location configurations
- Workflow automation settings
Information Collected Automatically
- Log data (IP address, browser type, access times)
- Device information
- Usage patterns and analytics
- RFID scan timestamps and locations
How We Use Your Information
We use the information we collect to:
- Provide and maintain the Service
- Issue invoices and send billing notifications
- Send service-related communications
- Provide customer support
- Improve and optimize the Service
- Detect and prevent fraud or abuse
- Comply with legal obligations
Third-Party Services
We use the following third-party services to operate RFID Flow:
| Service | Purpose | Data Shared |
|---|---|---|
| Neon | Database hosting | All application data |
| Upstash | Caching & rate limiting | Session tokens, cache keys |
| Render | Backend hosting | API requests, logs |
| Cloudflare | Frontend hosting, DNS & email routing | Static site assets; inbound email routed to our inbox |
| Resend | Transactional emails | Email addresses, names, and message content |
Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. Upon account deletion:
- Account data is deleted from our live systems following account closure
- Copies held in our infrastructure providers' managed backups age out on those providers' backup cycles
- You can request an export of your part records and scan history before closing your account
Your Data Rights
We extend these rights to all users, wherever you are located (they follow the GDPR model):
Access
Request a copy of your personal data
Rectification
Request correction of inaccurate data
Erasure
Request deletion ("right to be forgotten")
Portability
Request your data in machine-readable format
Objection
Object to certain processing
Restriction
Request limited processing
To exercise these rights, contact us at privacy@rfid-flow.com.
Data Security
We implement appropriate security measures including:
- Encryption in transit (TLS 1.2+), and encryption at rest provided by our infrastructure providers
- Automated dependency and static-analysis security scanning on every code change
- Role-based access controls, authenticated APIs, and account lockout on repeated failed logins
- Rate limiting on all API endpoints
Cookies
We use essential cookies for authentication and session management. We do not use tracking cookies or share cookie data with third parties for advertising purposes.
Children's Privacy
The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16.
International Data Transfers
Your data may be transferred to and processed in the United States. By using the Service, you consent to this transfer. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses where required.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For material changes, we will provide additional notice via email.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact:
Houston, TX, United States
You may also contact your data protection authority. For Canadian users, the Office of the Privacy Commissioner of Canada (OPC); for EEA users, your national supervisory authority.
Questions about your data?
We're here to help. Reach out to our team or review our terms of service.