Privacy Policy
Last updated: June 2026
1. Who we are
CrossFlow ("we", "our", "us") operates the CrossFlow platform at crossflow.pro. We provide financial infrastructure intelligence services to sales, partnership, and banking teams. Questions about this policy can be directed to privacy@crossflow.pro.
2. What data we collect
Account data: Name, work email address, company name, job title, and password (hashed) when you create an account.
Usage data: Pages visited, features used, signals viewed, and actions taken within the platform. We use this to improve the product and to send you relevant notifications.
Payment data: Billing details are processed and stored by Stripe. We do not store card numbers.
Company intelligence data: CrossFlow aggregates publicly available information about third-party companies (company names, domains, news, regulatory filings, job postings) to power signal detection. This data relates to businesses, not individuals.
Contact data: If you use our decision-maker identification features, we display professional contact data sourced from People Data Labs. This data is used solely within your account and is not shared.
3. How we use your data
- To provide and operate the CrossFlow platform
- To send signal alerts, digest emails, and product notifications
- To improve signal accuracy and platform features
- To process billing and manage your subscription
- To respond to support requests
- To comply with legal obligations
We do not sell your personal data to third parties.
4. Data sharing
We share data only with the following categories of sub-processors to operate the platform:
- Supabase — database and authentication
- Vercel — hosting and infrastructure
- Stripe — payment processing
- Anthropic — AI analysis (account briefs, signal scoring)
- Resend — transactional email
- PostHog — product analytics
- Google Analytics — website traffic analytics
- Sentry — error monitoring
5. Data retention
We retain your account data for as long as your account is active. If you close your account, we will delete or anonymise your personal data within 60 days, unless we are required to retain it for legal or contractual reasons.
6. Your rights
Depending on your location, you may have the right to access, correct, or delete your personal data, restrict processing, or request a copy of your data in a portable format. To exercise any of these rights, contact privacy@crossflow.pro.
If you are in the EU or UK, you also have the right to lodge a complaint with your local supervisory authority.
8. Security
We use industry-standard security practices including encryption in transit (TLS), encrypted storage, and role-based access controls. See our Security page for details.
9. Changes to this policy
We may update this policy from time to time. We will notify active users of material changes by email. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.
10. Contact
CrossFlow
privacy@crossflow.pro