Privacy Policy
Effective date: November 3, 2026
This policy explains what information StarFlow collects, how we use it, and the choices you have. StarFlow is operated by VirdisTech LLC, a Wyoming limited liability company ("we," "us"). Contact: hello@starflowhq.com, 30 N Gould St, Ste R, Sheridan, WY 82801, USA.
Who this covers
- Customers: businesses that sign up for StarFlow and the people who use their accounts.
- Recipients: the business's own customers, whose contact details a business adds so StarFlow can send them a review request on the business's behalf. For recipient data, the business is responsible for having permission to contact them, and we process that data on the business's instructions.
- Early access signups: people who join the StarFlow early access list on starflowhq.com.
Information we collect
- Account information: name, business name, email, phone number and password or sign-in details.
- Billing information: handled by our payment processor, Stripe. We do not store full card numbers.
- Recipient information the business provides: customer name, phone number and/or email, and the date of the job or visit.
- Message data: which requests were sent, delivered and clicked, and opt-out requests.
- Google Business Profile data (with your permission): see the next section.
- Usage and device data: log data, browser type, pages viewed and cookies needed to keep you signed in.
Early access list
When you join early access on starflowhq.com, we collect:
- Your email address, and a record of your consent: the time, your IP address, your browser, the page you signed up on and the wording you agreed to. Canada's anti-spam law asks us to keep this proof.
- How you found us: the campaign tags in the link you followed (such as utm_source) and the site that referred you.
- Pilot answers, if you give them: business name, business type, city, Google Business Profile link, phone number and roughly how many jobs or visits you have per month.
We use this only to confirm your email, send you early access and launch news, and choose businesses for the free pilot. We email you only after you confirm your address, and every email has a one-click unsubscribe link. If you don't confirm within 30 days, we delete your signup. If you unsubscribe, we stop emailing you straight away; to have your signup deleted as well, email hello@starflowhq.com.
Website analytics
We count visits to starflowhq.com with Umami, an open-source analytics tool that we run on our own servers in DigitalOcean's Toronto region. It sets no cookies and doesn't follow you across other websites. It records the pages you view, the site that referred you, campaign tags in the link, your browser, device type and country, and actions like clicking "Get early access" or submitting the form. Your IP address is used only to work out your country and is not stored. No other company receives this data.
Google user data
When you connect your Google account, StarFlow requests access to your Google Business Profile through Google's OAuth sign-in. With that access we:
- Read your business locations and profile details, so we can identify your business and create your review link.
- Read your reviews and ratings, so we can show them in your inbox and dashboard.
- Post replies to reviews, only when you approve or write a reply in StarFlow.
We use Google user data only to provide and improve these user-facing features. We do not sell it, use it for advertising, or use it to train general-purpose AI models. People at VirdisTech can't read it, except with your consent, for security purposes, to comply with law, or when it is aggregated and anonymized for internal operations.
StarFlow's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect Google at any time in StarFlow settings or from your Google Account permissions page. When you disconnect, we stop accessing your Google data and delete the stored copy within 30 days.
How we use information
- Send review requests and one reminder to recipients the business adds
- Show reviews, statistics and AI-drafted replies to the business
- Bill customers, provide support and send service emails
- Keep the service secure and prevent abuse
- Comply with legal obligations
AI-drafted replies
To draft a reply, we send the text of a review and your business name to our AI provider, Anthropic. Under Anthropic's commercial terms, this data is used only to generate the reply and is not used to train their models.
Text messages and email
StarFlow sends messages only on behalf of a business, to recipients that business says have agreed to be contacted. Every text includes opt-out instructions (for example, reply STOP). Opt-outs are honored automatically and apply to all future messages from that business. Message and data rates may apply.
Who we share information with
We do not sell personal information. We share it only with service providers that help us run StarFlow, under contracts that limit their use:
| Provider | Purpose |
|---|---|
| Twilio | Sending text messages |
| Zoho (ZeptoMail) | Sending email |
| Stripe | Payments |
| DigitalOcean | Hosting and databases |
| Anthropic | Drafting review replies |
| Cloudflare | Blocking spam signups on the early access form, only when this check is switched on |
We may also share information if required by law, to protect rights and safety, or as part of a merger or sale of the business.
Retention and deletion
We keep account data while your account is active. If you close your account, we delete your data, including recipient lists and Google data, within 30 days, except what we must keep for legal or billing reasons. Unconfirmed early access signups are deleted after 30 days. To request deletion, email hello@starflowhq.com.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal information, or to object to certain processing. Recipients who want their data removed can opt out of messages or contact the business that added them, or us. We respond to requests within 30 days.
Security
We use encryption in transit and at rest, limit staff access, and store Google access tokens securely. No system is perfectly secure, and we'll notify affected users of a breach as required by law.
International transfers
Our servers are located in Canada (DigitalOcean's Toronto region). By using StarFlow, you understand your information may be processed outside your country, including in the United States and Canada.
Children
StarFlow is a business tool and isn't directed to anyone under 16. We don't knowingly collect children's information.
Changes
If we change this policy materially, we'll notify customers by email or in the app before the change takes effect.
Contact
VirdisTech LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, USA, hello@starflowhq.com