Privacy Policy

Last Modified: September 23, 2026

This Privacy Policy describes how Sourceflow LLC ("the Company," "Sourceflow," "We," "Us," or "Our"), operator of the websites located at sourceflow.io (the "Service," "Website" or "Platform"), collects, uses, and protects your information. This Privacy Policy is incorporated into and forms part of our Terms of Service. By using the Platform, you agree to the practices described here. If you do not agree, please do not use our Service.

Information We Collect

Account information. When you register we collect your name, email address, and a password. Passwords are stored only in hashed form; we never store or have access to your plaintext password.

Billing information. Subscription payments are processed by Stripe, Inc. Your card details are collected and stored by Stripe; the Company does not store or process credit card numbers. We retain records of your subscription plan, billing status, and invoices.

Amazon marketplace data. If you choose to connect your Amazon Selling Partner account, we access order, listing, and related marketplace data through Amazon's official Selling Partner API, solely to provide the features of the Service to you. You can disconnect this authorization at any time from your account settings.

Usage data. We collect information about how you use the Platform, such as pages visited, features used, and actions taken, along with technical data such as IP address, browser type, and device information. If enabled, we use Google Analytics to help us understand aggregate usage; analytics identifiers are pseudonymous and we do not send Google your name or email address.

Referral information. If you arrive through an affiliate or referral link, we record the referral identifier so the referring partner can be credited.

Communications. If you contact support or submit feedback through the Platform or the browser extension, we retain those messages.

The Sourceflow Amazon Extension

The Sourceflow Amazon Extension (the "extension") is an optional browser extension for Google Chrome. It works only on Amazon product pages (amazon.com and amazon.ae) and only while you are signed in to your Sourceflow account. This section describes what it does with your data; everything else in this Privacy Policy applies to it as well.

What it reads. When you open the extension on an Amazon product page, it reads the product details shown on that page: the product identifier (ASIN), title, brand, category, price, sales rank, variation details and product image address. It does not read your Amazon account, your orders, your cart or your payment details, and it does not read any page other than the product page you have open.

What it sends to Sourceflow. The product identifier is sent to Sourceflow so the extension can show you your team's data for that product, such as your leads, buy lists, purchase history and estimated fees. The product details listed above are sent only when you choose to save the product to a lead list or a buy list, so that they can be stored with that record. If you send feedback from the extension, we receive your message, the extension version and the address of the product page you were on, together with your name, email address and team as recorded on your account.

What it stores on your device. The extension keeps your sign-in token and your display preferences (panel position, theme, whether the panel stays open) in the browser's extension storage, and a short-lived cache of product data for the products you have viewed, so the panel opens quickly. The cache expires within minutes and all of it is removed when you sign out or uninstall the extension.

What it does not do. The extension does not collect your browsing history, does not track the pages you visit, does not read keystrokes or form entries, does not run on any site other than the Amazon product pages listed above, and does not send data to anyone other than Sourceflow. We do not sell or transfer the data it handles, we do not use it for advertising, and we use it only to provide and improve the features you use.

How We Use Your Information

We use the information we collect to:

• provide, operate, and maintain the Service;
• process subscription payments and manage your account;
• deliver the product data, lead lists, and analytics features you subscribe to, on the Platform and through the browser extension;
• send transactional email such as verification, billing, and service notifications;
• respond to support requests;
• credit affiliate referrals;
• understand usage in aggregate so we can improve the product;
• protect the Platform against fraud and abuse, including through reCAPTCHA verification at login and registration.

We do not sell your personal information to third parties.

Third-Party Service Providers

We share information with a small number of service providers only as needed to operate the Service:

• Stripe (payment processing)
• Amazon Selling Partner API (marketplace data you authorize)
• Mailgun (transactional email delivery)
• Intercom (in-app support messaging)
• Google reCAPTCHA (abuse prevention; subject to Google's Privacy Policy and Terms of Service)
• Google Analytics (aggregate usage analytics, when enabled)
• Rewardful (affiliate referral tracking)

Each provider receives only the information necessary to perform its function and is bound by its own privacy obligations.

Cookies

We use cookies and similar technologies that are necessary for the Service to function, such as session and authentication cookies, and, when enabled, analytics cookies. You can control cookies through your browser settings, but disabling essential cookies will prevent you from logging in.

Data Retention

We retain your account information for as long as your account exists. If you cancel your subscription, your account data is retained so you can return without losing your history. You may request deletion of your account and associated personal information by contacting us at team@sourceflow.io; we will honor verified deletion requests within a reasonable period, except where retention is required for legal, billing, or fraud-prevention purposes.

Security

We take reasonable technical and organizational measures to protect your information, including encryption in transit, hashed password storage, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children

The Service is not directed at children. We do not knowingly collect personal information from anyone under the age of thirteen. If you believe a child has provided us personal information, please contact us and we will delete it.

Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete the personal information we hold about you. To exercise any of these rights, contact us at team@sourceflow.io. We will verify your identity before acting on a request.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the last modified date at the top of this page. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

Governing Law

This Privacy Policy is governed by the laws of the State of Washington, consistent with our Terms of Service.

Contact Us

If you have any questions about this Privacy Policy or our data practices, contact us at team@sourceflow.io.