Personal Data Processing Policy (Privacy Policy)

1. General provisions

TeamFlow AI is a service for team collaboration, project and task management, communications, file sharing, and related functions.

The personal data operator is Artem Vadimovich Maksimov, an individual. Questions about personal data and legal matters may be sent to teamflowai.privacy@gmail.com.

This Policy applies to data processed through the TeamFlow AI website and service.

2. Key terms

• Personal data means information relating directly or indirectly to an identified or identifiable individual.
• Processing means any operation or set of operations performed on personal data, including collection, recording, storage, use, transfer, restriction, deletion, and destruction.
• Operator means the person who determines the purposes and means of personal data processing.
• User means an individual who visits the website, creates an account, or uses TeamFlow AI.

3. Data that may be processed

• Name, display name, email address, avatar, and other profile information provided by the user.
• Account data, workspace membership, roles, invitations, and user or workspace settings.
• Projects, tasks, descriptions, statuses, priorities, deadlines, assignments, comments, and related activity.
• Channel and direct chat messages, reactions, pinned messages, and communication metadata.
• Files and attachments voluntarily uploaded to profiles, projects, tasks, or chats.
• Technical data required to operate and protect the service, such as IP address, browser or device information, request timestamps, authentication identifiers, and service logs where generated.
• Selected plan, payment identifier and status, and service information needed to process a plan change. Full bank-card numbers and CVV codes are handled by the payment provider and are not requested or stored by TeamFlow AI.
• Questions submitted to AI Copilot and the minimum workspace context needed to answer them, limited to information available to the requesting user.

4. Processing purposes

• Creating, authenticating, and maintaining user accounts.
• Providing workspaces, projects, tasks, Kanban, team collaboration, chat, notifications, and file storage.
• Providing support, diagnosing failures, preventing abuse, and protecting accounts and the service.
• Processing payments, confirming their status, and granting the selected plan after successful server-side confirmation.
• Running AI Copilot at the user's request and producing workspace-grounded responses.
• Complying with applicable legal obligations and resolving disputes.

5. Legal grounds

Personal data is processed on the basis of the user's consent where consent is required, for performance of the TeamFlow AI Terms of Use, to comply with applicable law, and on other grounds provided by law where they apply to the specific processing.

6. Processing operations

Processing is primarily automated and may include collection, recording, organisation, accumulation, storage, updating, retrieval, use, provision of access or transfer where required for service providers, restriction, deletion, and destruction. Data is not distributed to an indefinite group of persons unless the user intentionally makes it available through a service function or the law requires disclosure.

7. Service providers

TeamFlow AI may use Google OAuth for authentication, YooKassa for payments, Supabase Storage for user files, Groq for AI Copilot, and hosting and database infrastructure for service operation. Each provider receives only the data reasonably needed for its function and processes it under its own terms and applicable requirements.

Some providers or their infrastructure may be located outside the Russian Federation. The actual data locations and any cross-border transfers depend on the deployed configuration and provider arrangements. TeamFlow AI does not claim that all data is stored in Russia unless this has been separately verified for the production deployment.

8. Cookies and local storage

The service uses necessary authentication or session identifiers and browser storage for language, theme, interface preferences, safe redirect state, and temporary billing-return state. These mechanisms support security and core product functions. TeamFlow AI does not currently use advertising or marketing analytics cookies in the client application.

9. Retention and deletion

Data is processed until the relevant purpose is achieved, while the account or relationship with the user exists, or until consent is withdrawn where consent is the applicable ground. Data may be retained longer only where required by law or reasonably necessary to meet obligations or resolve disputes. When no lawful ground remains, data is deleted or destroyed in accordance with applicable requirements and technical procedures.

10. Data protection

The operator applies reasonable organisational and technical measures, including access controls, authentication, separation of user permissions, and measures intended to prevent unauthorised access, alteration, disclosure, or loss. No online service can promise absolute security.

11. User rights

• Request information about personal data processing.
• Request correction, restriction, or deletion where provided by law.
• Withdraw consent without affecting processing lawfully carried out before withdrawal.
• Contact the operator at teamflowai.privacy@gmail.com and exercise other rights provided by applicable law.

12. Policy changes

The operator may update this Policy. The current version and its revision date are published at /privacy.

13. Contacts

Artem Vadimovich Maksimov

teamflowai.privacy@gmail.com