Privacy Policy

BlessFlow ("we," "us," "our") operates the BlessFlow platform accessible at blessflow.com. We are the data controller for personal data collected through the Platform.

Contact: privacy@blessflow.com

2.1 Account Data

• Email address, display name, profile photo
• Role (Donor / Provider / Both)
• Preferred language

2.2 Provider Profile Data

• Country of residence, spoken languages
• Self-reported annual income and family information
• Face photograph (required for Provider registration)
• Stripe Connect account identifier (managed by Stripe)

2.3 Transaction Data

• Donation amounts, timestamps, and status
• Request messages from Donors to Providers
• Rating history
• Stripe Payment Intent IDs (no card data is stored by BlessFlow)

2.4 Video Data

• Video files recorded by Providers (stored on Cloudflare R2)
• Recording metadata (duration, file size, timestamp)
• First-viewed timestamp (used to calculate the 7-day deletion window)

2.5 Usage and Technical Data

• IP address, browser type, device information
• Page views and interaction logs
• Cookies (see Section 8)

We share data with the following trusted service providers:

• Stripe, Inc. — Payment processing. Subject to Stripe's Privacy Policy.
• Supabase — Authentication and database hosting.
• Cloudflare R2 — Video file storage.
• Amazon Web Services (Rekognition) — Automated video content moderation.
• Upstash — Rate limiting (no personal data stored).
• Vercel — Platform hosting and edge delivery.

We do not sell your personal data to third parties.

Videos are stored securely on Cloudflare R2 and are accessible only via time-limited signed URLs. Only the commissioning Donor and BlessFlow administrators can access a video.

Videos are permanently deleted 7 days after the Donor first opens them. Once deleted, they cannot be recovered.

If a Donor downloads and publicly shares a video, the Provider's likeness may become visible to third parties. BlessFlow is not responsible for content that has been downloaded and shared by users.

• Account data: Retained until account deletion, then permanently deleted after 30 days.
• Transaction records: Retained for 7 years for legal and tax compliance.
• Videos: Deleted 7 days after first view (see Section 5).
• Log data: Retained for 90 days.

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct inaccurate data.
• Erasure ("right to be forgotten"): Request deletion of your account and associated data.
• Portability: Receive your data in a machine-readable format.
• Objection: Object to processing based on legitimate interest.
• Withdraw consent: Withdraw marketing consent at any time.

To exercise these rights, contact us at privacy@blessflow.com. We will respond within 30 days. Note that some data may be retained for legal compliance even after a deletion request.

EU/EEA residents have the right to lodge a complaint with a supervisory authority.

We use the following cookies:

• Essential cookies: Required for authentication and security. Cannot be disabled.
• Analytics cookies: Used to understand usage patterns (with your consent).

You can manage cookie preferences through the cookie banner displayed on your first visit (EU/EEA users) or through your browser settings.

Your data may be processed in countries outside your own, including the United States and the European Union. We ensure appropriate safeguards are in place, including Standard Contractual Clauses where required.

BlessFlow is not intended for users under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email at least 14 days before the changes take effect.

Data protection enquiries: privacy@blessflow.com