Privacy Policy

Who we are

EdenFlow AI ("EdenFlow", "we", "us") provides business automation services — including AI-driven customer messaging, pricing tools, and QuickBooks Online integrations — to small and medium businesses. This policy explains what information we collect through our onboarding form and connected services, and how we use it.

Questions or requests relating to your data can be sent to info@edenflowai.uk.

What we collect

When you complete our onboarding form, we collect:

• Your business name and business type
• Your name, email address, and phone number
• The services you've told us you want us to build
• If you choose to connect QuickBooks Online, an OAuth authorization linking your QuickBooks company to your EdenFlow setup

QuickBooks data

If you connect QuickBooks Online, we request read-only access to your accounting data — things like customers, invoices, and bills — solely to build and run the automations you've asked for (for example, invoice reminders or monthly reports). We do not create, edit, or delete anything in your QuickBooks company.

How QuickBooks access works & is stored

The connection uses Intuit's standard OAuth 2.0 flow. After you authorize access, we store:

• Your QuickBooks company identifier (realm ID), so we know which company to sync
• An OAuth refresh token, which lets us request fresh, time-limited access tokens from Intuit without asking you to log in again

The refresh token is encrypted at rest using AES-256-GCM before it's stored. It is only decrypted at the moment it's needed to talk to Intuit's API.

How we use your data

We use the information you provide to:

• Set up, configure, and operate the automations you've requested
• Contact you about your onboarding, setup progress, or account
• Keep the service running securely and diagnose issues

Sharing & sub-processors

We don't sell your data. To deliver the service, we share the minimum necessary data with:

• Cloudflare — hosting for this site and our database (Cloudflare Pages + D1)
• Resend — sends transactional emails related to your onboarding
• Intuit — provider of the QuickBooks Online platform and API you're connecting to

Retention

We keep your data for as long as you're an EdenFlow client, or as long as needed to provide the service. You can ask us to delete your data at any time by emailing info@edenflowai.uk. QuickBooks refresh tokens automatically expire after roughly 100 days of inactivity, at which point you'd need to reconnect.

Your rights (UK GDPR)

You have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Withdraw consent at any time, including disconnecting QuickBooks via your Intuit account or by asking us to do it for you

To exercise any of these rights, contact info@edenflowai.uk.

Security

We apply reasonable technical and organisational measures to protect your data, including encryption of QuickBooks refresh tokens at rest and access controls limiting who can reach production systems and data.

Changes to this policy

We may update this policy from time to time as our service evolves. The "last updated" date at the top of this page will always reflect the most recent version.

---

Questions about this policy? Email info@edenflowai.uk.