Skip to content
JobFlow

Privacy Policy

Last updated: May 2026

1. Introduction

JobFlow ("we", "our", "us") is committed to protecting your privacy. This policy explains how we collect, use and safeguard your personal data in compliance with the General Data Protection Regulation (GDPR) and Irish data protection law.

2. Data We Collect

We collect the following data when you use our website or services:

  • Name and contact details (email, phone number)
  • Company name and industry
  • Usage data and analytics
  • Information you provide through our forms

3. WhatsApp and Messaging Data

JobFlow integrates with the WhatsApp Business Platform (operated by Meta Platforms, Inc.) to enable our customers — the businesses that use our platform — to communicate with their clients via WhatsApp.

When a business connects their WhatsApp Business Account to JobFlow, we process the following data on their behalf:

  • Phone numbers of the business's clients, used to send and receive WhatsApp messages
  • Message content sent and received through our platform using Meta-approved message templates (such as appointment reminders, booking confirmations, route notifications, payment requests, and quotes)
  • Message metadata, including delivery status, timestamps, and message identifiers
  • Customer responses, including replies and interactive button selections

We process this data as a data processor on behalf of the business (the data controller). We do not use WhatsApp message content for our own purposes, and we do not share message content with any third party other than Meta, which is required to deliver the messages.

All WhatsApp messaging is conducted through Meta's Cloud API infrastructure. We do not store message content on any infrastructure outside the European Union.

4. How We Use Your Data

We use your data to:

  • Respond to demo requests and enquiries
  • Provide and improve our services
  • Send relevant communications about our products
  • Comply with legal obligations

5. Data Storage

All data is stored on EU-based servers. We do not transfer your data outside the European Economic Area unless stated otherwise in the Third-Party Service Providers section below.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The following are general retention periods — actual retention may vary depending on the circumstances.

  • User account data — Duration of account plus a short grace period after closure
  • Billing records relating to your JobFlow subscription — 6 years from date of transaction (required under Irish tax law, Taxes Consolidation Act 1997)
  • Tenant operational data (jobs, customers, communications) — Deleted upon account closure and expiry of any grace period, unless the tenant has an ongoing legal or contractual obligation requiring retention
  • Security event logs — Up to 24 months

Data created by tenants within the platform (such as their customer records, job data, and invoices issued to their own customers) belongs to the tenant. Upon account closure, this data is deleted in line with the above schedule. Tenants may also delete individual records at any time through the platform.

7. Third-Party Service Providers

We use the following third-party service providers to operate the platform. Each provider processes data on our behalf and we share only the minimum data necessary for them to perform their function.

Infrastructure and Hosting

  • Vercel Inc. — Application hosting and delivery (EU)
  • Supabase Inc. — Database hosting (EU)
  • Upstash Inc. — Rate limiting and caching (EU)

Communications

  • Meta Platforms, Inc. — WhatsApp message delivery (EU and US per Meta's data policy)
  • Resend Inc. — Transactional email delivery (US)
  • Twilio Inc. — SMS delivery where enabled (US)

Payments

  • Stripe Inc. — Payment processing (US and EU)

Mapping and Location

  • Google LLC — Geocoding, route directions, address autocomplete (US)

Monitoring

  • Sentry (Functional Software, Inc.) — Error tracking (US)

We do not sell personal data to any third party. Where data is transferred outside the European Economic Area, we rely on safeguards recognised under EU law.

8. Your Rights

Under GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request deletion of your data
  • Object to processing of your data
  • Data portability

To exercise any of these rights, including requesting deletion of your data, see our Data Deletion page or contact us at info@jobflow.ie.

9. Contact

For any privacy-related queries, contact us at info@jobflow.ie.

Request Access