Privacy Policy

Last Updated: March 19, 2026

At Flow by Zitopy Tech, we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your information when you use our platform.

1. Information We Collect

We operate a Unified User Model where you can be both a Client and a Business Owner using a single account. We collect information to provide a seamless experience, including:

  • Account Information: Name, email address, and phone number. We strategically prioritize WhatsApp numbers to provide instant, direct booking notifications.
  • Business Data: Information about your services, pricing, availability, and payout bank details (required for Paystack Split-Payment Subaccounts).
  • Client Data: Information provided when booking an appointment.
  • Reputation Data: Ratings from our Two-Way Rating System, and calculated Trust Scores based on successful platform interactions and payments.
  • Usage Data: Information on how you interact with our platform.

2. How We Use Your Information

We use the collected information to:

  • Provide, maintain, and personalize our services.
  • Process bookings and facilitate split-payments securely.
  • Send critical booking alerts directly to your WhatsApp or Email.
  • Manage the Flow Reward & Protection System and dynamically update Trust Points.
  • Resolve disputes via our evidence-first Flow Protection Guarantee.
  • Improve our platform's functionality and user experience.
  • Comply with legal and regulatory obligations.

3. Data Security

We implement strict, industry-standard security measures (including ProxyFix for HTTPS headers and mandatory CSRF protection) to protect your data from unauthorized access, alteration, or disclosure. However, no method of transmission over the internet is 100% secure.

4. Sharing of Information

We do not sell your personal information. We share data with third-party service providers (such as Paystack for secure split-payment processing) strictly as necessary to provide our services. We do not operate an escrow model; payments are routed directly to business owners.

Bank Data & NDPR Compliance: To facilitate automated payouts, it is contractually necessary for us to collect and process your Bank Account Number. This data is handled in strict compliance with the Nigerian Data Protection Regulation (NDPR) and is securely transmitted via API to our licensed payment processor, Paystack, to create and manage your settlement subaccount.

5. Your Rights

You have the right to access, update, or soft-delete your personal or business information (including services and availability) at any time through your unified dashboard settings.

6. Cookies

We use cookies (e.g., Secure Session Cookies) to enhance your experience, maintain session state, and remember your preferences. You can manage cookie settings in your browser.

7. Contact Us

If you have any questions about this Privacy Policy, please contact us at support@zitopy.com.