Privacy

Last updated: 29 October 2026

Wright Consulting Inc. runs yoflow.io. This policy explains what information we collect, why, who we share it with, and your rights. We never sell your information.

What we collect and why

• Who you are. The name and email address of each person who signs up or is invited, and the company name, site name and logo you add. We use them to set up your account, sign you in and show your branding in the editor.
• Signing in. One-time sign-in links, sign-in sessions and, if you turn it on, your two-step sign-in setup. We keep a record of sign-ins to protect your account.
• Billing. Stripe handles your card. Your card number never reaches our servers. We keep your plan, trial and billing dates and payment status, and can show the card type and its last four digits.
• Your website. To make the changes you ask for, yoflow reads and writes your site's files in your GitHub repository through the yoflow.io GitHub app. We keep a record of what changed, who changed it and when, for History and the change log.
• Emails you send us. When you email help@yoflow.io, we keep the conversation so we can help you.
• Contact forms on your website. When a visitor sends a contact form on a website that uses yoflow, we receive what they typed and email it to the people the site chose. We keep each message so the site's people can see it in yoflow, until they delete it or the customer account is deleted.
• Technical information. Cloudflare runs yoflow and processes technical information, such as IP addresses, to deliver and protect the service.
• The yoflow.io website. It loads its fonts from Google Fonts, which receives your IP address. We don't use advertising cookies.

Emails we send

We send the emails needed to run your account: sign-in links, invitations, trial and billing notices, and important changes to yoflow. We don't send marketing emails unless you've agreed to receive them.

Who we share it with

We share information only with the services we use to run yoflow, and only what they need:

• Cloudflare runs yoflow, stores its database, sends and receives our email, and checks that contact forms are sent by people, not bots.
• Stripe processes payments.
• GitHub holds your website's files, in your own account. yoflow works with them through the app you install.
• Google Fonts serves the fonts on the yoflow.io website.
• When the law requires it. We disclose information only when we're legally required to, and only what's required.

Where it is stored

These services may store and process information outside Canada, including in the United States.

How long we keep it

• We keep your information while your account is open.
• When you delete your customer account, your information is removed from yoflow. Copies in our database backups are gone within 30 days.
• We keep billing records for as long as tax law requires.
• Your website's files and history are in your GitHub account, so they're yours to keep or delete.

Security

• Every connection to yoflow is encrypted (HTTPS).
• Card details go straight to Stripe.
• Two-step sign-in is available to everyone, on the Account page.
• Nobody at yoflow looks at your site or account unless you ask for help, something breaks and needs fixing, or the law requires it.

Your rights

You can ask to see the information we hold about you, ask us to correct it, or ask us to delete it. You can change your name and email address yourself on the Account page.

Email help@yoflow.io. We may need to confirm it's you before we answer.

If you're not happy with our answer, you can complain to the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta.

Changes to this policy

When we make a significant change, we'll update the date at the top of this page and email account owners.

These policies are adapted from the 37signals (Basecamp) policies, used under the CC BY 4.0 licence. We have changed them to fit yoflow.