Privacy Notice

Last updated: August 22, 2026

1. Who We Are

cflo inc. ("we", "us", "our") is a software company based in Wilmington, Delaware, United States. We sell macOS audio software for DJs and music producers. You can reach us at contact@cfloinc.com.

2. What Data We Collect

We collect the following categories of personal data:

Account data: name, email address, billing address, payment method details (processed by our payment providers, Stripe or PayPal, depending on how you pay — we never store card numbers)
Purchase data: order history, products purchased, license keys issued
Usage data: pages visited, time on site, referring URLs (via Google Analytics, only with your consent)
Device data: machine identifiers for software license activation (stored by Keygen.sh)
Communications: support emails and messages you send us, including any diagnostic files and logs you choose to attach
Campaign attribution: the campaign parameters (UTM tags) in the link that brought you to our site — including links opened from the cflo inc. installer app, which carry campaign parameters but no device or installation identifier — stored alongside your email address if you subscribe to a product newsletter or waitlist

3. How We Use Your Data

Fulfilling your software purchases and delivering license keys
Managing license activations and machine limits
Sending transactional emails (order confirmation, license delivery)
Responding to support requests
Improving our website and products (analytics, with consent)
Measuring advertising effectiveness (Facebook Pixel, with consent)
Attributing newsletter and waitlist signups to the campaign or installer link that referred them, to measure which campaigns drive interest

4. Legal Basis (GDPR)

For visitors in the European Economic Area, we process your data under:

Contract performance — processing orders, delivering licenses
Legitimate interests — fraud prevention, security, responding to support and pre-sale inquiries, and measuring which campaigns or installer links drive newsletter/waitlist signups
Consent — cookie- and pixel-based analytics and advertising measurement (you can withdraw at any time via our cookie banner)

5. Third Parties We Share Data With

Stripe — payment processing (privacy policy)
PayPal — checkout payment processing (privacy policy)
Keygen.sh — license key management
Google Analytics — site analytics (with consent)
Meta (Facebook) — advertising measurement (with consent)
DigitalOcean — infrastructure and hosting
WooCommerce / WordPress — e-commerce platform
Atlassian — customer-support ticketing (Jira Service Management): support requests and correspondence, related contact details, and diagnostic files and logs you choose to send us (privacy policy)

We do not sell your personal data to third parties.

6. Data Retention

We retain your account and purchase data for as long as your account is active and for 12 months after account termination, or as required by law. Analytics data is retained per Google's default retention settings (14 months). Newsletter and waitlist subscriber data, including any campaign-attribution parameters stored with it, is retained until you unsubscribe or ask us to delete it.

Support tickets: retained 24 months after resolution, then deleted. Diagnostic-log attachments: deleted at the earlier of 30 days after resolution or 90 days after upload.

7. Your Rights

Depending on your location, you have the right to:

Access — request a copy of your personal data
Rectification — correct inaccurate data
Erasure — request deletion of your data ("right to be forgotten")
Restriction — ask us to limit how we use your personal data in certain circumstances, such as while we verify its accuracy or consider an objection
Portability — receive your data in a structured format
Objection — object to processing based on legitimate interests
Withdraw consent — update analytics/marketing preferences at any time via the cookie banner
Opt out of sale or sharing — disable advertising cookies and pixels at any time via our cookie consent banner (see our Cookie Policy) (CCPA)

To exercise your rights, email contact@cfloinc.com. We will respond within 30 days.

Where applicable, you may also lodge a complaint with the competent data-protection or supervisory authority.

8. International Transfers

Our servers are located in the United States (DigitalOcean NYC). If you are in the EEA, your data is transferred to and processed in the US. Support requests are handled through Atlassian, which hosts support data globally and may process it in the US or other regions. We rely on Standard Contractual Clauses and the adequacy decisions of our processors to safeguard these transfers.

9. Changes to This Notice

We may update this Privacy Notice from time to time. We will notify registered users of material changes by email. The "Last updated" date at the top of this page reflects the most recent revision.

10. Contact

cflo inc.
221 W 9th St #549
Wilmington, DE 19801
United States
contact@cfloinc.com