Privacy Policy

Data Collection

ERP Flow Studios collects account details, clinic profile data, and operational data entered by authorized users to provide clinic management features.

Data We Access

When you sign in with Google, ERP Flow Studios accesses only the Google user data required for authentication and account setup, including your basic profile information:

• Full name
• Email address
• Profile picture (avatar), if available
• Google account identifier needed to verify account ownership

We do not access sensitive Google user data such as Contacts, Google Drive files, or Gmail content unless such access is explicitly enabled in a separate integration flow and clearly disclosed at that time.

How We Use Data

We use Google user data only for legitimate service functionality related to authentication and account management, including:

• Signing you in securely to ERP Flow Studios
• Creating and linking your user account to the correct clinic or business workspace
• Displaying basic profile details in your account (such as name and profile image)
• Protecting account security, preventing unauthorized access, and supporting login troubleshooting

We do not use Google user data for advertising purposes.

We do not transfer or sell Google user data to third parties.

Google user data is accessible only to authorized systems and personnel on a limited, need-to-know basis, and is protected using reasonable technical and organizational safeguards, including encrypted transport and access controls.

We may disclose data only where necessary to operate the service (for example, trusted infrastructure or processing providers under contractual controls) or to comply with applicable law, regulation, or lawful government requests.

Cookies

We use cookies and similar storage technologies to keep users signed in, preserve preferences, and improve session reliability across devices.

Analytics

Anonymous usage analytics may be used to understand product performance and improve user experience while minimizing personally identifiable information.

User Accounts

Clinics manage role-based user accounts for admins, doctors, and staff. Each clinic is responsible for maintaining credential confidentiality and access permissions.

Data Protection

We apply technical and organizational safeguards, including transport encryption, access controls, and regular backups to protect platform data.