This page explains how SumaFlow handles data collected through our website at sumaflow.app. We've kept it short, plain, and honest. If anything is unclear, email [email protected].
Note: This policy covers our website only. Each SumaFlow product (such as SumaFlow Minutes) has its own separate privacy policy that describes how that specific product handles your data.
1. Who we are
"SumaFlow," "we," "us," and "our" refer to the team operating the website at sumaflow.app. For privacy-related questions, reach us at [email protected]. For anything else, [email protected].
2. What we collect
Visiting sumaflow.app involves three categories of data:
2.1 Server logs (automatic)
Like any website, sumaflow.app is served through hosting infrastructure (Cloudflare) that automatically records standard request data: your IP address, the page you requested, your browser type, the referring page, and the date and time. This is standard for the operation of any website on the internet. We do not use this data for tracking or marketing.
2.2 Information you submit through the contact form
If you fill in the contact form on this site, we receive your name, email address, and the message you wrote. We use this information solely to reply to you. We do not add you to a marketing list or share your message with third parties.
2.3 Privacy-friendly analytics (if enabled)
We may use Cloudflare Web Analytics to understand which pages on our site are visited and which referrers send us traffic. Cloudflare Web Analytics is cookieless, does not fingerprint visitors, and does not track individuals across sites. If you'd like to learn more, see Cloudflare's Web Analytics page.
3. What we do not collect
- We do not use advertising or marketing tracking cookies.
- We do not use Google Analytics, Facebook Pixel, or similar surveillance tools.
- We do not sell or rent your data to anyone.
- We do not have user accounts on this website, so there are no passwords or account profiles to compromise.
4. Third-party services we use
To run the website, we rely on a small set of third parties, each of which has its own privacy policy:
- Cloudflare — hosts the website and provides DNS, security, and (optionally) privacy-friendly analytics. Cloudflare Privacy Policy.
- Google Fonts — serves the typefaces used on the site. When your browser loads a page, it requests font files from Google's servers, which means Google receives your IP address as part of that request. Google Privacy Policy.
- GitHub — stores the code that builds this website. GitHub does not receive visitor data; it is only used by us internally.
5. Cookies
This website does not set tracking cookies. Some essential cookies may be set by Cloudflare for security purposes (for example, to detect bots or mitigate attacks), but these are not used to track you across other sites.
6. How we use the information
We use the data described above only for these purposes:
- To operate, maintain, and secure the website.
- To respond to messages you send us through the contact form or email.
- To understand, in aggregate, what content on our site is useful — using privacy-friendly analytics that do not identify individuals.
We do not use your information for advertising, profiling, or automated decision-making.
7. How long we keep your information
- Server logs: retained by our hosting provider for a short period (typically days to weeks) for security and operational purposes.
- Contact form messages: kept in our email inbox for as long as needed to respond and maintain the conversation history. You may request deletion at any time.
- Analytics: aggregated, non-identifying data may be retained indefinitely.
8. Your rights
Depending on your location, you may have rights under data protection laws such as the EU GDPR, UK GDPR, the Philippine Data Privacy Act of 2012, the California Consumer Privacy Act (CCPA), or similar regulations. These rights generally include:
- The right to know what personal data we hold about you.
- The right to request correction of inaccurate data.
- The right to request deletion of your data.
- The right to object to or restrict certain processing.
- The right to lodge a complaint with your local data protection authority.
To exercise any of these rights, email [email protected]. We will respond within a reasonable timeframe and at no cost to you.
9. International data transfers
The website is served through Cloudflare's global network, which means your request may be served from a data center in any region close to you. Email sent to us is received through our email provider's servers. By using this website, you consent to this routing.
10. Children
This website is not directed at children under 13, and we do not knowingly collect information from anyone under 13. If you believe a child has submitted information to us, please contact us so we can delete it.
11. Changes to this policy
We may update this policy occasionally — for example, when we add a new third-party service or change how the site operates. The "Last updated" date at the top of the page reflects the most recent change. Material changes will be reflected by a clearly updated date and, where appropriate, a notice on the website.
12. Contact
For any privacy-related question, request, or complaint, email [email protected]. For security vulnerabilities, email [email protected]. For anything else, [email protected]. We aim to respond within a reasonable timeframe.