Privacy Policy

Who we are

DrewFlow builds AI and business automation for businesses in the Phoenix, Arizona area. Questions about this policy or your data go to hello@drewflow.io.

Information from businesses we work with

When a business signs up for one of our services, we collect:

• Contact details for the owner or staff we work with, such as name and email address.
• Access the business grants us to its accounts, such as its Google Business Profile or booking system, and the content we read through that access, such as Google reviews.
• Drafts we write and the changes the business makes to them, which we keep to improve future drafts for that same business.

Information about our clients’ customers

Some automations work with the customer records of a business we serve. For example, a fitness studio may have us send follow-up emails to its clients. In that case we receive customers’ names, email addresses, and booking or visit history from the business’s own systems (such as Mindbody), and we use them only to run that business’s automations. The business decides who it emails; we act on its behalf and do not use its customer data for anything else.

Email we send

• Marketing emails sent for a business go only to customers who opted in to promotional email with that business.
• Every marketing email includes a one-click unsubscribe link and the business’s physical address. Unsubscribing takes effect immediately, and we check every send against the list of people who have unsubscribed.
• Addresses that bounce or report an email as spam are suppressed automatically and are not emailed again.
• Business owners also receive service notifications from us, such as a new review waiting for their approval.

Services we use

We rely on a small number of providers to run our services:

• Amazon Web Services for hosting, data storage, and email delivery. AI drafting runs on Amazon Bedrock inside our AWS account, and content sent for drafting is not used to train AI models.
• Google, to read and reply to a business’s Google reviews with its permission.
• Booking systems such as Mindbody, to read a business’s schedule and customer activity with its permission.

We do not sell personal information, and we do not share it with anyone for advertising.

How long we keep it

We keep data for as long as a business uses our services. When a business stops working with us, or asks us to, we delete its data and its customers’ data, except anything we are required to keep by law.

Your choices

If you receive marketing email through one of our clients, you can unsubscribe with the link in any email. If you are a customer of a business we serve, you can also ask that business, or us at hello@drewflow.io, to access or delete your information.

Changes to this policy

If we change this policy, we will update the date at the top of this page.