Privacy policy.

Last updated 6 October 2026.

Last updated: 6 October 2026

Before launch, add the legal name, registered number and address of the company that runs Cuppaflow, your ICO registration number, and have this policy reviewed.

Who we are

Cuppaflow provides software that UK trade and service businesses use to manage enquiries, quotes, jobs, invoices and payments. Contact us at privacy@cuppaflow.com.

Two roles

For our own customers (the businesses that sign up), we are the data controller for account information: names, email addresses, phone numbers, billing details and how you use the service.

For your customers (the people you quote, book and invoice through Cuppaflow), you are the data controller and we are your data processor. We only use that data to run the service for you, under our Data Processing Agreement.

What we collect and why

  • Account details, to create and secure your account (contract).
  • Billing details, handled by Stripe, to take subscription payments (contract and legal obligation).
  • Usage and device data, to keep the service secure and working (legitimate interests).
  • Messages to us, to provide support (legitimate interests).

Who we share data with

We use these sub-processors: our hosting provider (servers and database), Stripe (payments), Brevo (email and text messages; for messages you send, your own Brevo account is used), Cloudflare (network security), and Sentry (error monitoring). We do not sell personal data.

How long we keep it

Account data is kept while your account is open. If you cancel, your account is paused and data is deleted after 90 days, except invoices and records we must keep for tax purposes. Backups are overwritten within 30 days.

Security

Data travels over HTTPS. Passwords are hashed, and API keys you connect (Brevo, Stripe) are encrypted with AES-256. Each business's data is kept separate in the application.

Your rights

You can ask to access, correct, delete, restrict or move your data, and object to processing. Email privacy@cuppaflow.com. You can also complain to the Information Commissioner's Office at ico.org.uk.

Cookies

The Cuppaflow app uses one essential cookie to keep you signed in securely. This website does not use advertising or tracking cookies.