Privacy Policy

Introduction

Windingflow ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our supply chain management platform and related services.

Information We Collect

Information You Provide

• Business contact information (name, email address, phone number, company name)
• Account credentials
• Order and transaction data
• Supplier and distributor information
• EDI communication data
• Shipping and logistics information
• Payment and billing information

Information Automatically Collected

• Log data and usage statistics
• Device information and IP addresses
• Cookies and similar tracking technologies
• Platform performance metrics
• System configuration data

How We Use Your Information

We use your information to:

• Provide and maintain our supply chain management services
• Process and fulfill orders
• Facilitate EDI communications
• Manage supplier and distributor relationships
• Generate analytics and performance reports
• Improve our platform and services
• Send important service updates and notifications
• Process payments and handle billing
• Respond to customer support inquiries
• Ensure platform security and prevent fraud

Data Sharing and Disclosure

We may share your information with:

Service Providers

• Cloud hosting providers
• Payment processors
• Shipping and logistics partners
• Analytics services
• Customer support tools

Business Partners

• Authorized distributors and suppliers within your supply chain network
• Integration partners (with your explicit consent)
• EDI trading partners you choose to connect with

Legal Requirements

• When required by law or government authorities
• To protect our rights, privacy, safety, or property
• To enforce our terms of service
• In connection with a business transfer or merger

Data Security

We implement robust security measures to protect your information:

• Encryption of data in transit and at rest
• Secure cloud infrastructure
• Regular security audits and assessments
• Access controls and authentication
• Monitored systems and intrusion detection
• Employee training on data security

International Data Transfers

We may transfer your data internationally to provide our services. We ensure appropriate safeguards are in place through:

• Standard contractual clauses
• Data processing agreements
• Compliance with applicable data protection laws

Your Rights and Choices

You have the right to:

• Access your personal information
• Correct inaccurate data
• Request deletion of your data
• Export your data
• Opt-out of marketing communications
• Manage cookie preferences
• Withdraw consent for optional processing

Data Retention

We retain your information for as long as:

• Your account is active
• Needed to provide our services
• Required by law or regulations
• Necessary for legitimate business purposes

Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect information from children under 16.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes through:

• Email notifications
• Platform announcements
• Website updates

Additional Information

Cookie Policy

We use cookies and similar technologies to:

• Maintain platform functionality
• Remember your preferences
• Analyze usage patterns
• Enhance security
• Improve user experience

Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for their privacy practices.

California Privacy Rights

California residents have additional rights under the CCPA. Contact us to exercise these rights.

GDPR Compliance

For users in the European Economic Area, we comply with GDPR requirements and provide additional data protection rights.