Privacy Policy

ArtisanFlows is production-management software for craft-food makers, operated by ArtisanFlows, [registered address] (“we”, “us”). We are the data controller for the personal data we hold about you as our customer (your account, billing, support and usage data). For the personal data you enter into your workspace about your contacts — for example your wholesale customers, suppliers or team members — you are the controller and we act as your processor, processing it only on your instructions to provide the service. Contact us at hello@artisanflows.com.

• Account data: name and email from sign-up (via our authentication provider), your role, and workspace/organization details.
• Billing data: subscription plan and payment status. Card details are handled by Stripe — we never see or store full card numbers.
• Workspace content: the production data you enter — ingredients, recipes and formulations, batches, records, finished goods, and any contacts you add.
• Technical & usage data: limited log data (such as request and organization identifiers, actions, timestamps and error codes) needed to run, secure and debug the service. We do not log recipe formulations, message contents, or full request bodies.
• Support communications: messages you send us.

• To provide, maintain and secure the service and your account — performance of our contract with you.
• To take payment, prevent fraud, keep our service reliable, and communicate about it — contract and our legitimate interests in running a secure, functioning business.
• To keep financial and tax records — compliance with a legal obligation.
• For any non-essential cookies or optional communications — your consent, which you can withdraw at any time.

We do not sell your data, we do not use it for third-party advertising, and we do not currently use third-party product-analytics or advertising trackers.

Recipe formulations are trade secrets. We treat them as confidential, restrict access to what is needed to run the service, will never share or sell them, and will never train AI models on your recipe data without your explicit opt-in consent.

We share personal data only with the service providers (sub-processors) that help us run ArtisanFlows, each bound to protect it and use it only on our instructions. Your database and files are hosted in the EU (Frankfurt).

We may also disclose data if required by law, or as part of a merger or sale of the business (with notice to you).

Your workspace data is stored in the EU. Some of our providers are established outside the European Economic Area (for example in the United States), so limited processing may involve a transfer outside the EEA. Where that happens, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses or an adequacy decision — to protect your data.

We keep your account and workspace data for as long as your account is active. If you delete your account, a recovery window (30 days) applies, after which the data is permanently deleted from live systems and purged from backups on a rolling basis. Financial and tax records are retained for as long as the law requires. Limited security logs are kept for a short period, then deleted.

Subject to applicable law, you may access, correct, export (data portability), delete, restrict or object to our processing of your personal data, and withdraw consent where we rely on it. Much of this is self-service in the app:

• Access & portability: export all your data as JSON from Settings.
• Rectification: your data is editable throughout the app.
• Erasure: delete your account from Settings (30-day recovery window, then permanent deletion).

For any other request, email hello@artisanflows.com; we aim to respond within one month. You also have the right to lodge a complaint with your local data-protection supervisory authority.

We apply reasonable technical and organizational measures to protect personal data, including encryption in transit, strict per-organization data isolation, role-based access controls, and EU data residency. No system is perfectly secure, but we work to protect your data and will notify you of a breach where the law requires.

We use essential cookies required to sign you in and run the app. Any non-essential cookies are only set with your consent via the cookie banner, which you can change at any time.

ArtisanFlows is a business tool and is not directed to children. We do not knowingly collect personal data from anyone under 18.

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing.

We may update this policy from time to time. For material changes we will give reasonable notice (for example, by email or in-app) and update the date above.