Privacy Policy — GiveFlow

GiveFlow is operated by Otech Labs LLC ("we," "us"), 33 W Palmer St, Danielson, CT 06239, United States. Contact: contact@otechlabs.io. GiveFlow is a community civic-rewards platform available at giveflow.app (and the legacy address coinflow.software).

1. What we collect

• Account information: your name, email address, and password (stored as a secure hash)
• Community and role data: the town or community you belong to and your role (resident, business, community/organization verifier, or town admin)
• Residency information: details you submit to verify you belong to a town or community, when you request residency verification
• Rewards and activity: your Flow balance, peer-to-peer transfers you send or receive, rewards issued to you, and redemptions you make — kept as a transaction history
• Business information (if you operate a business on GiveFlow): your offers, the redemptions made at your business, and any service requests
• Survey responses you choose to submit, and event check-ins or opportunity claims you make
• Support information: messages you send us and support-ticket replies
• Notification preferences you set
• Payment information: processed by our payment processor Stripe; we never see or store full card numbers
• Usage and device data: basic technical information and diagnostic logs needed to keep the app secure and reliable

1a. About location

GiveFlow uses the general location of your town or community (not your device) to show you nearby business offers. We do not collect your device's GPS/precise location, and we do not track your movements.

2. How we use it

• To operate the rewards program: crediting and transferring Flow, issuing rewards, and settling redemptions
• To verify residency and eligibility when you request it, so towns and communities can trust who is participating
• To process payments and business subscriptions through Stripe
• To prevent fraud, abuse, and double-spending, and to keep the rewards economy honest
• To provide aggregate, program-level reporting to towns and communities (for example, total participation or redemption volume)
• To send service messages (account, security, billing). Marketing emails only with your consent, with unsubscribe in every message.

3. Who can see your information

• Your town's admins and authorized verifiers can see what their role requires — for example, to approve a reward or review a residency request you submitted.
• A business can see redemptions made at that business.
• We never sell personal data. We never share it with advertisers.
• Service providers who help us run GiveFlow (hosting, payment processing by Stripe, email delivery) process data on our behalf under contracts limiting use to our instructions.

4. Records we must be able to access

Because GiveFlow moves value between people and businesses and confirms civic eligibility, some records — your Flow balance, transfers, redemptions, payment records, and residency verifications — are part of an operational and financial ledger. We retain and are able to access these records where necessary for fraud prevention, dispute resolution, program integrity, and legal, tax, or accounting requirements. We do not use them for advertising or sell them, and access is limited to what's needed to operate the service.

5. Where data lives and how it's protected

Data is stored on secure cloud infrastructure with encryption in transit and at rest, row-level security, and role-based access controls. Access is limited to what's needed to operate the service.

6. Your choices and rights

• Access, correct, or export your data from your account settings
• Delete your account at any time from settings or via our account deletion page. Deletion removes your personal data within 30 days, except records we are required to retain for legal, tax, or audit-integrity reasons, which we keep in de-identified form where possible.
• Depending on where you live (e.g., EU/UK, California), you may have additional rights over your data; contact us to exercise them.

7. Children

GiveFlow is not directed at children under 13, and we do not knowingly collect their data.

8. Changes

We'll post changes here and update the effective date. Material changes will be announced in the app or by email.

Contact

Otech Labs LLC — GiveFlow — contact@otechlabs.io.