Privacy

Reportflow sells market research reports you buy once. We collect only what we need to take your payment, prepare your report and send it to you. There are no accounts, so we never ask for a name, password or address. Last updated October 22, 2026.

What we collect

• The industry or niche you enter, and the report prepared from it.
• Your email address, which you give Stripe at checkout, so we can send you the link to your report and answer you if you write to us.
• Payment details we need for our records: the payment's status, amount, currency, date and Stripe reference. We never see or store your card number.
• Your IP address, for about a minute, to limit how often checkout can be started from one connection. It is not stored with your order.
• How the site is used, through Google Analytics: pages viewed, the site that sent you, your device, browser and approximate location, and whether you started checkout or bought a report (which one and the amount). It never receives the niche you enter, your email address or the link to your report.

How we use it

• To prepare your report, and to read it before it is sent so we can check its quality.
• To email you the link to your report, or tell you about a refund.
• To process payments and refunds, and to keep the records tax and accounting rules require.
• To protect the site from abuse.
• To understand which pages and sources bring visitors, so we can improve the site.

We don't sell or rent your data, share it for advertising, send marketing emails or use your niche or report to train anything.

Who handles it for us

These companies process data on our behalf, only to provide the service:

• Cloudflare hosts the site and stores orders and reports.
• Stripe takes payments and handles refunds. Its own privacy policy covers the card details you give it.
• Our research provider receives the niche you enter so your report can be prepared. It does not receive your email address or payment details.
• Resend sends the email with your report link.
• Google Analytics measures how the site is used, as described above. We have turned off its advertising features.

Some of them may process data outside your country, under their own data protection commitments.

How long we keep it

• Your report and niche stay as long as the site runs, so your private link keeps working, unless you ask us to delete them.
• Payment records are kept as long as tax and accounting law requires, usually up to seven years.
• Emails you send us are kept while we need them to answer you.

Cookies and tracking

We use Google Analytics to count visits and purchases. Outside the European Economic Area, the UK and Switzerland it sets first-party cookies (named _ga) that tell repeat visits apart; in those regions it runs without cookies. Its advertising features are off, and we don't use advertising cookies or tracking pixels. You can opt out with Google's opt-out browser add-on or any content blocker; the site works the same. Stripe's checkout page sets its own cookies to process your payment and prevent fraud.

Security

Everything is sent over HTTPS. Your report sits at a long, random private link that can't be guessed; anyone you share that link with can read it, so share it only with people you trust.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete your report and order details. Depending on where you live (for example in the EU, the UK or California), you may have further rights, such as objecting to how we use your data or complaining to a data protection authority. Email hello@reportflow.io from the address you used at checkout and we'll reply within 30 days. Stripe keeps its own payment records as the law requires.

Children

Reportflow is for businesses and adults. We don't knowingly collect data from anyone under 16.

Changes

If we change this policy, we'll update it here and change the date at the top.

Contact

Privacy questions or requests: hello@reportflow.io.