UniqueFlow Privacy Policy

Last updated: September 23, 2026

1. Who we are

UniqueFlow is a web application for quotes, invoices, planning and rentals, available at portal.uniqueflow.online. This policy explains which data UniqueFlow processes, why, and what your rights are.

Operated by: Pieter Verschoor
Contact: info@uniqueflow.online

2. Data we process

• Account data: name, username, email address, a hashed password and your two-factor authentication secret. Used to let you sign in and to secure your account.
• Business data you enter: business settings, your customers and their contact details, quotes, invoices, planning, rental items and photos. Stored to provide the service. We process your customers' data on your behalf, as a processor.
• Technical data: a session cookie, which is required to stay signed in, and server logs including IP address and time, for security and troubleshooting. No advertising or tracking cookies.
• Contact form: if you use the contact form, we receive your name, company, email address, phone number and message by email. We use them only to reply to you and delete them when they are no longer needed.
• Connected mailbox data (optional): see section 3.

3. Google, Microsoft and SMTP mailbox connection

You can optionally connect your mailbox under Settings → Email, so that quotes, invoices and reminders are sent from your own address.

Google (Gmail / Google Workspace)

UniqueFlow requests only these scopes:

• openid and email: to show which Google account is connected;
• https://www.googleapis.com/auth/gmail.send: to send emails that you compose in UniqueFlow.

How we use Google user data:

• An email is sent only when you click Send in the app. It contains the recipient, subject, text and attachments that you chose.
• UniqueFlow cannot read your email. We do not request access to your inbox, contacts or calendar.
• We store only the connected email address and a refresh token. The token is encrypted (AES-256-GCM) on our server and is never sent to the browser.
• We do not share Google user data with third parties, use it for advertising, sell it, or use it to train AI or machine-learning models.
• No human reads your Google user data, unless you explicitly ask us to (for example for support), it is necessary for security, or the law requires it.

Microsoft 365 / Outlook

UniqueFlow uses Mail.Send to send, User.Read to show the connected address, and Mail.ReadWrite only to prepare a message with large attachments as a draft and then send it. No other messages are read. Tokens are encrypted in the same way.

Own mail server (SMTP/IMAP)

Your mailbox password is stored encrypted (AES-256-GCM). It is used only to send messages and to place a copy in your Sent folder.

Disconnecting

Click Disconnect under Settings → Email. We then immediately delete the stored token and revoke the permission at Google. You can also revoke access at any time at myaccount.google.com/permissions or in your Microsoft account.

4. Storage and retention

Data is stored on a server managed by UniqueFlow and is transmitted over HTTPS. We keep your data for as long as your account exists and delete it within 90 days after cancellation, unless a legal retention obligation applies. Backups are overwritten within 90 days.

5. Sharing

We do not sell data. We only share data where needed to provide the service: with the server hosting provider, and with the mail provider you connect yourself (Google, Microsoft or your own provider) to send your messages. Otherwise we only share data when the law requires it.

6. Your rights

You may request access to, correction, deletion or export of your data, and you may object to processing. To do so, email us at info@uniqueflow.online. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

7. Changes

If this policy changes, we update the date at the top. We announce significant changes in the app.