Privacy Policy

Effective date: September 6, 2026

Last updated: September 6, 2026

1. Introduction

Powder Flow LLC (DBA PowderFlow Systems) ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our powder coating workflow management platform and related services.

2. Information We Collect

Personal Information

  • Name, email address, and contact information
  • Account credentials and authentication data
  • Billing and payment information
  • Organization and company details

Business Data

  • Job and order information
  • Customer records and contact details
  • Inventory and product data
  • Workflow and production information
  • Time tracking and employee scheduling data
  • Photos uploaded to jobs (e.g. before/after coating shots, defect documentation)

Usage Information

  • Log data and device information
  • IP addresses and browser type
  • Pages visited and features used
  • Performance and error data

Product Analytics and Session Recordings

  • Named product-usage events (for example: sign-up started, job created, import completed)
  • Page-performance measurements and aggregate heatmaps of where visitors click
  • Replayable recordings of application sessions — the pages viewed, mouse movement and clicks, and browser console output

These are collected through PostHog. Section 4 sets out what is and is not captured.

3. How We Use Your Information

  • Provide, operate, and maintain our services
  • Process transactions and send related information
  • Send administrative notifications and updates
  • Respond to customer service requests
  • Improve and personalize user experience
  • Analyze usage patterns to enhance our platform
  • Detect, prevent, and address technical issues
  • Comply with legal obligations

4. Third-Party Integrations

PowderFlow integrates with third-party services to provide enhanced functionality. When you connect these services, we may access and store data from those platforms:

The services described below are the ones that affect what you connect and what you see. For the complete list of every third party that processes data on our behalf, including our hosting, storage, and AI providers, see our subprocessors page. Our security overview describes how that data is protected.

QuickBooks Online

When you connect your QuickBooks account, we access invoice, customer, and payment data to synchronize your financial records. This data is used solely to provide accounting integration features and is stored securely.

Stripe

Payment processing is handled by Stripe. We do not store complete credit card numbers. Stripe's use of your data is governed by their privacy policy.

Twilio

SMS notifications are sent via Twilio. Phone numbers are shared with Twilio solely for message delivery purposes. You can opt out of SMS at any time by replying STOP to any message we send, or by emailing info@powderflowsystems.com.

Clerk

Authentication, sign-in, and account management are powered by Clerk. Account credentials, session tokens, and identity verification data are processed by Clerk on our behalf and are governed by their privacy policy.

Sentry

We use Sentry to capture application errors and performance traces so we can diagnose and fix issues. Sentry events may include device information, IP address, and a stack trace; we configure Sentry to redact sensitive request data.

PostHog

Product analytics are provided by PostHog, hosted in the United States at us.i.posthog.com. We send a defined set of named product events (for example: a sign-up being started, a customer or job being created, a data import completing), together with basic device and page context, page-performance measurements, aggregate heatmaps of where visitors click, and your IP address, which is recorded without anonymisation. We deliberately limit what is collected: we do not autocapture incidental interactions, we do not automatically record every page view, and we do not build a person profile for anonymous visitors to our marketing site — a profile is created only once you identify yourself by signing in. PostHog's use of this data is governed by their privacy policy.

Session replay (PostHog)

Separately from the analytics events above, PostHog records replayable sessions of people using the application, so that we can understand how the product is used and diagnose problems. Recording is not limited to a sample — sessions are recorded in full. A recording captures the pages you view, your mouse movement and clicks, and your browser's console output. Password fields are always masked, and values typed into other form fields are masked by default; text that is already displayed on the page is not masked and therefore forms part of the recording.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

  • With service providers who assist in operating our platform
  • To comply with legal requirements or respond to lawful requests
  • To protect our rights, privacy, safety, or property
  • In connection with a merger, acquisition, or sale of assets
  • With your consent or at your direction

6. Data Security

We implement appropriate technical and organizational security measures to protect your data, including encryption in transit and at rest, secure authentication, role-based access controls, and regular security assessments. However, no method of transmission over the Internet is 100% secure.

The Service is hosted on the following infrastructure:

  • Railway — application hosting (web servers, background workers)
  • Neon PostgreSQL — primary database for account, job, and business data
  • Cloudflare R2 — object storage for files and photos uploaded to jobs

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. We may retain certain information as required by law or for legitimate business purposes. You may request deletion of your data by contacting us.

8. Your Rights

Depending on your location, you may have the following rights:

  • Access and receive a copy of your data
  • Correct inaccurate personal information
  • Request deletion of your data
  • Object to or restrict processing
  • Data portability
  • Withdraw consent at any time

Getting a copy of your data

You can export your jobs, customers, inventory, products and customer products yourself at any time from within the app. For anything else — or for a complete copy in one go — email support@powderflowsystems.com and we'll send a complete export of your organisation's data — jobs, customers, inventory, products and history — in CSV format within 30 days of the request.

9. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Powder Flow LLC (DBA PowderFlow Systems)

Email: info@powderflowsystems.com

Support: support@powderflowsystems.com

Website: powderflowsystems.com