Last updated: January 2026

FlowGo Pty Ltd (Australia) and FlowSync AI Sdn Bhd (Malaysia) (collectively, "FlowGo", "we", "us", or "our") are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, and protect personal information in connection with our website and platform (the "Services").

FlowGo operates from Australia and Malaysia. This policy applies to information collected from users of the FlowGo platform and visitors to our website. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as well as Malaysia's Personal Data Protection Act 2010 (PDPA), where applicable.

For the purposes of applicable privacy laws, the FlowGo entity that contracts with you is the primary entity responsible for handling personal information under this Privacy Policy.

‍

Who We Are

FlowGo is a software company with operations in Australia and Malaysia, providing financial workflow automation tools for businesses across the Asia-Pacific region.

Australian entity: FlowGo Pty Ltd
Malaysian entity: FlowSync AI Sdn Bhd (Registration No.: 202501045885 (1647293-D))

In most cases:

• Our customers control the business data processed through FlowGo.
• FlowGo acts as a service provider that processes data on behalf of its customers to deliver the Services.

‍

Business Customer Responsibilities

Where you are a business customer using FlowGo, you are responsible for:

• Ensuring you have appropriate authority to share business data with FlowGo
• Complying with your own privacy obligations to employees, customers, suppliers, and other third parties whose information may be processed through the Services
• Providing any required notices and obtaining necessary consents under applicable privacy laws in your jurisdiction

‍

Information We Collect

a. Information You Provide

We may collect personal and business information that you voluntarily provide, including:

• Name
• Email address
• Phone number
• Company name
• Job title or role
• Billing and payment details
• Support communications
• Information you input into the FlowGo platform

b. Information Collected Automatically

When you use our website or Services, we may automatically collect:

• IP address
• Browser type and device information
• Operating system
• Usage data (pages viewed, features used, time spent)
• Cookies and similar technologies

c. Financial and Accounting Integrations

If you connect FlowGo to third-party systems (such as QuickBooks, AutoCount, Xero, MYOB, SAP, or other ERP and financial platforms), we may process business and financial workflow data required to perform the automation tasks you configure, including:

• Invoice data (vendor and customer invoices)
• Purchase orders and receipts
• Vendor and customer records
• General ledger codes and account structures
• Payment and transaction records
• Supporting documents and attachments

We:

• Access only the data necessary to provide the Services
• Do not use financial data for advertising or profiling
• Do not review customer data except where required for support, security, or legal compliance

‍

How We Use Information

We use personal information to:

• Provide, operate, and maintain the Services
• Perform automated workflows at your direction
• Process subscriptions and payments
• Communicate service updates, support responses, and operational notices
• Send limited business-related communications about FlowGo products and service updates (you may opt out at any time)
• Improve product performance and functionality
• Monitor usage and analyse trends
• Maintain security, prevent fraud, and ensure system integrity
• Comply with legal and regulatory obligations

We do not sell, rent, trade, or commercially exploit personal information.

‍

Disclosure of Information

We may disclose personal information to:

a. Service Providers

Trusted third parties that assist us in operating the Services, such as:

• Cloud hosting providers (including Amazon Web Services and Google Cloud Platform)
• Payment processors
• Analytics providers
• Customer support tools
• Email service providers

These providers are authorised to use personal information only as necessary to perform services on our behalf.

b. Related Entities

We may share personal information between our Australian and Malaysian entities where reasonably necessary to provide and support the Services.

c. Integration Partners

When you choose to connect FlowGo with third-party platforms, we share information required to enable those integrations, in accordance with your instructions.

d. Legal and Regulatory Requirements

We may disclose information where required or authorised by law, including to comply with court orders, regulatory requests, or to protect our legal rights and security.

‍

Overseas Disclosure and Data Location

Personal information may be stored, processed, or accessed from multiple jurisdictions, including Australia, Malaysia, Singapore, Thailand, and the United States (through cloud service providers).

Where personal information is transferred internationally, we take reasonable steps to ensure that recipients handle the information in a manner consistent with applicable privacy laws, including through contractual protections, the use of reputable service providers with recognised security certifications (such as ISO 27001 or SOC 2), and technical safeguards such as encryption.

For Malaysian users: by using the Services, you consent to the transfer of your personal data outside Malaysia in accordance with the PDPA.

For Australian users: we take reasonable steps to ensure overseas recipients comply with the Australian Privacy Principles.

‍

Data Security

We implement reasonable administrative, technical, and organisational measures to protect personal information, including:

• Encryption in transit and at rest
• Role-based access controls
• Secure infrastructure and monitoring
• Regular security assessments
• Multi-factor authentication for platform access
• Security incident response procedures

No system is completely secure. While we take reasonable precautions, we cannot guarantee absolute security.

‍

Data Retention

We retain personal information only for as long as necessary to provide the Services and comply with legal, regulatory, tax, and accounting obligations.

Indicative retention periods include:

• Account information: for the duration of your active account and for a reasonable period thereafter
• Transaction and workflow data: up to 7 years where required by applicable tax or accounting laws
• Support communications: up to 3 years after the last interaction
• Marketing communications data: until you unsubscribe or request deletion

After the applicable retention period expires, personal information is securely deleted or anonymised.

‍

Access, Correction, and Data Portability

You have the right to:

• Request access to personal information we hold about you
• Request correction of inaccurate or incomplete personal information
• Request deletion of personal information, subject to legal retention obligations
• Request export of your data in a structured, commonly used format
• Withdraw consent where consent is the legal basis for processing (which may affect our ability to provide certain Services)

For Australian users, these rights arise under the Australian Privacy Principles.

For Malaysian users, these rights arise under the Personal Data Protection Act 2010.

Requests may be made using the contact details below. We may need to verify your identity before responding and will generally respond within 30 days.

‍

Marketing Communications

You may opt out of receiving non-essential marketing communications at any time by:

• Clicking the "unsubscribe" link in marketing emails
• Contacting us at hello@flowgoai.com
• Adjusting your communication preferences in your account settings

Opting out of marketing communications will not affect service-related communications necessary for your use of the Services.

‍

Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain secure sessions
• Remember user preferences
• Analyse usage and improve functionality
• Provide customer support

You can manage cookies through your browser settings. Disabling cookies may affect certain features of the Services. Further details are available in our Cookie Policy.

‍

Data Breaches

In the event of a data breach, we will comply with our obligations under applicable laws, including:

• In Australia, the Notifiable Data Breaches scheme administered by the Office of the Australian Information Commissioner
• In Malaysia, notification obligations under the Personal Data Protection Act 2010

We will assess the severity of any breach and take appropriate remedial action.

‍

Third-Party Links

Our website or Services may contain links to third-party websites or tools. We are not responsible for the privacy practices or content of those third parties.

‍

Children's Privacy

FlowGo is intended for business users and is not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

‍

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on our website with an updated "Last updated" date and, where required by law, we will notify you directly.

‍

Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or our handling of personal information, please contact:

Australia:
FlowGo Pty Ltd (ACN 691 432 292)
Email: hello@flowgoai.com

Malaysia:
FlowSync AI Sdn Bhd (Registration No.: 202501045885 (1647293-D))
Email: hello@flowgoai.com

For Australian users, complaints may be lodged with the Office of the Australian Information Commissioner at www.oaic.gov.au.

For Malaysian users, complaints may be lodged with the Personal Data Protection Commissioner at www.pdp.gov.my.