UPDATED 19 OCTOBER 2026

Privacy notice

This notice covers information sent through the BufFlow website enquiry form.

What you provide

The form asks for your name, email address, the workflow area and a description of the task. Your phone number, business name and current tools (including any “Something else” description) are optional. Please do not submit passwords, financial records or other sensitive information.

How it is used

BufFlow uses these details to record, review and respond to your enquiry and to manage a resulting business relationship. The form records your agreement to this use and the version of this notice. Submitting an enquiry does not subscribe you to marketing.

Storage and access

The website runs on Vercel and enquiry records are stored in Supabase. Resend sends a notification containing your submitted details to BufFlow’s enquiry inbox, which is currently hosted by Gmail. These providers process information needed to operate the service. Client records are not publicly readable; access is restricted to the backend and authorised project operators. The providers may process data outside your country.

Gmail sends an automatic receipt and responses reviewed by the team. Your selected workflow, description and current tools may be sent to OpenAI for automated draft preparation. Names and contact fields are not added to that request; information you include in the description or other-tools field may still be processed. Response storage is disabled for these requests; provider operational retention may still apply. A person reviews detailed replies before sending.

Approved enquiries receive a private BufFlow scheduling link. You can review a suggested time or choose an available time and confirm it without a Google account. Google Calendar receives your email and appointment details to create a Google Meet meeting and send an invitation. BufFlow also emails a final acknowledgement. Keep the scheduling link private: anyone holding it can access your booking and meeting link. Links expire after 14 days.

Spam prevention uses a token derived from connection information. The enquiry database does not store your full IP address. Hosting providers may process technical request logs under their own policies.

Retention and your requests

Enquiry records are kept while needed to respond to the request and manage the business relationship. To request access, correction or deletion, use the enquiry form, select “Something else” and describe your privacy request. BufFlow may need to verify your identity before acting on it.

Your browser

The form keeps its current contents in page memory while you use it. A successful submission displays a reference and lets you download your own copy. This website does not add marketing trackers or store form details in browser storage.