Privacy Policy

This page is not the final, legally-drafted Privacy Policy — that's still in progress. Until it's live, here's a summary of what data we process, who the sub-processors are, and what rights you have over your own data — all of this is accurate today.

What data we process

Your account data (email address, password — we don't store the password ourselves, Supabase Auth handles it encrypted), and whatever you or your team enters into the CRM: contacts, companies, deals, tasks, notes, sent emails, invoices. When you use an AI feature (scoring, drafting, prediction), the relevant context for that request (e.g. a deal's or contact's details) is sent to the Anthropic API to generate the response.

Who the sub-processors are

Supabase — database and login. Resend — delivery of emails sent from your account. Anthropic — the AI features (Claude Haiku 4.5). Vercel — hosting the interface. If you need the full sub-processor chain described for a B2B review, write to hello@wonflowhub.com.

Your rights — these already work

For every contact, one button exports all related data (notes, emails, invoices, deals, tasks) into a single file. Deleting a contact also deletes its notes. We track marketing consent (opt-in/opt-out) per contact separately. Every such action is logged.

Questions?

Write to hello@wonflowhub.com — we reply by email.