DiscountFlow Policies

DiscountFlow is a product operated by RankRealm SEO LLC ("DiscountFlow," "we," "us," or "our"), a Delaware limited liability company. These Policies explain how we collect, use, disclose, and protect information when you use our website and software-as-a-service platform (the "Service").

This page contains our: - Privacy Policy - Cookie Policy - GDPR / UK GDPR Disclosures - CCPA / CPRA Disclosures (California) - Subprocessors - Contact Us

If you have questions, contact us anytime at info@discountflow.io.

Privacy Policy

1. Information We Collect

Information you provide directly: - Full name - Work email address - Company name - Billing information (collected and processed by Stripe — see below; we do not store full card numbers)

Information within the Service ("Customer Content"): When you use DiscountFlow, you and your team may input product information, sales data, and discount/approval details related to your own clients or deals. We refer to this as "Customer Content." Customer Content is stored on your behalf so the Service can function, and we act as a data processor/service provider with respect to this content — you (our customer) remain the controller of that data.

Information collected automatically: - Usage and analytics data via Google Analytics 4 (GA4) and Google Search Console (page views, feature usage, referral source, general engagement metrics) - We do not currently collect or log IP addresses directly, though our infrastructure providers (e.g., hosting, CDN) may process IP addresses transiently as part of normal internet routing and security operations.

Information from advertising: - If you interact with our ads, advertising pixels (e.g., Meta, Google Ads) may collect information about that interaction. See our Cookie Policy for details.

2. How We Use Information

We use collected information to: - Provide, operate, and maintain the Service - Process account registration, authentication, and billing - Provide customer support - Send transactional emails (e.g., account notifications, approval requests) via Resend - Understand aggregate usage trends to improve the Service (via GA4/GSC) - Communicate product updates or marketing (with opt-out available) - Comply with legal obligations and enforce our Terms of Service - Power in-product automation features using inference/AI processing (see Section 3)

3. AI / Automated Processing

DiscountFlow uses AI inference (via DigitalOcean's AI/inference infrastructure) to power certain in-product automation features. This processing is used to support workflow functionality (e.g., surfacing recommendations related to Customer Content) and does not involve fully automated decisions that produce legal or similarly significant effects on individuals.

4. How We Share Information

We do not sell your personal information. We share information only with: - Service providers who process data on our behalf (see Subprocessors) - Advertising partners, limited to pixel-based interaction data if you engage with our ads (see Cookie Policy and CCPA Disclosures) - Legal or safety reasons, if required by law, subpoena, or to protect the rights, property, or safety of DiscountFlow, our users, or the public - Business transfers, if DiscountFlow is involved in a merger, acquisition, or asset sale (you will be notified)

5. Data Retention

• Account and Customer Content data is retained for as long as your subscription is active.
• If you cancel your subscription, your account data and Customer Content are automatically deleted within 30 days of cancellation.
• If you wish to have your account deleted entirely (including outside the 30-day window, or immediately), contact info@discountflow.io — this is currently a manual process while we build self-serve deletion tooling.
• Billing records may be retained longer as required by Stripe and applicable tax/accounting law.

6. Data Security

We use industry-standard safeguards, including TLS encryption in transit and provider-level encryption at rest, to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Where Your Data Is Stored

Data is hosted on DigitalOcean infrastructure in the US West region. If you are located outside the United States, your information will be transferred to and processed in the United States — see International Data Transfers below.

8. Children's Privacy

DiscountFlow is a business tool not directed at or intended for use by individuals under 16. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated via email or an in-app notice. Continued use of the Service after changes take effect constitutes acceptance.

Cookie Policy

What Are Cookies

Cookies are small text files stored on your device that help websites function and collect information about how they're used.

Cookies We Use

Managing Cookie Preferences

• Visitors in the EU, UK, and other regions requiring opt-in consent will be presented with a cookie consent banner allowing acceptance or rejection of non-essential cookies before they load.
• You can also control cookies through your browser settings at any time.
• California residents may opt out of "sharing" for cross-context advertising purposes — see CCPA Disclosures.

Third-Party Cookies

Some cookies are set by third parties (Google, Meta) when you interact with our ads or embedded analytics. These third parties' use of cookies is governed by their own privacy policies.

GDPR / UK GDPR Disclosures (EEA, UK, and Switzerland Users)

Our Role

For account-level data (name, email, company, billing), DiscountFlow acts as the data controller. For Customer Content you input into the Service about your own clients/deals, DiscountFlow acts as a data processor, and your organization is the controller. We're happy to discuss a Data Processing Agreement (DPA) with enterprise customers upon request — contact us at info@discountflow.io.

Legal Basis for Processing

International Data Transfers

Because our infrastructure is hosted in the United States, data from EEA/UK/Swiss users is transferred internationally. Where required, we rely on Standard Contractual Clauses (SCCs) or equivalent safeguards with our service providers to ensure adequate protection.

Your Rights

If you are located in the EEA, UK, or Switzerland, you have the right to: - Access the personal data we hold about you - Request correction of inaccurate data - Request deletion ("right to be forgotten") - Restrict or object to processing - Data portability - Withdraw consent at any time (where processing is based on consent) - Lodge a complaint with your local data protection authority

To exercise any of these rights, email info@discountflow.io. We will respond within the timeframe required by applicable law.

CCPA / CPRA Disclosures (California Residents)

Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information, as defined under the CCPA: - Identifiers (name, email address, company name) - Commercial information (billing/subscription details, via Stripe) - Internet/network activity (analytics data via GA4, advertising interaction data via pixels)

We do not collect sensitive personal information (e.g., precise geolocation, government ID numbers, health data) and do not knowingly collect information from minors.

Do We "Sell" or "Share" Personal Information?

We do not sell personal information for money. However, our use of advertising pixels (e.g., Meta, Google Ads) may constitute "sharing" under the CPRA, because it allows cross-context behavioral advertising.

You have the right to opt out of this sharing. You can do so by: - Using the cookie preference controls on our site, or - Enabling the Global Privacy Control (GPC) signal in your browser — we honor GPC signals as a valid opt-out request.

Your CCPA/CPRA Rights

California residents have the right to: - Know what personal information is collected, used, shared, or sold - Delete personal information we've collected (subject to certain exceptions) - Correct inaccurate personal information - Opt out of the sale or sharing of personal information - Non-discrimination for exercising your privacy rights

To exercise these rights, email info@discountflow.io. We may need to verify your identity before completing your request.

Subprocessors

We use the following third-party service providers to operate DiscountFlow:

We will update this list as our vendor relationships change. Enterprise customers may request advance notice of subprocessor changes.

Contact Us

For any questions about these Policies, or to exercise your privacy rights, contact:

RankRealm SEO LLC (operating DiscountFlow) Email: info@discountflow.io