Legal

Privacy Policy

This Privacy Policy explains how Dataflo collects, uses and shares personal information.

Version 1.0 · Last updated October 21, 2026

This Privacy Policy explains how Dataflo LLC (“Dataflo,” “we,” “us”) collects, uses and shares personal information. It covers our websites (dataflo.ai, billflo.ai and the Govflo sites), our products Billflo and Govflo, and their web portals and mobile apps.

Summary

We do not sell personal information. We do not share mobile numbers or SMS consent with third parties for marketing. We do not use customer data to train generalized AI models. We host our products in the United States.

Our role as data controller and service provider

For your account, our websites and our own marketing, Dataflo decides how personal information is used. For data that a government agency or other organization puts into our products, such as records searched and redacted in Govflo, Dataflo acts as a service provider. In that case we process the data only on that customer’s instructions and under its contract, and that customer’s own privacy practices also apply. If you have a question about a record an agency holds, contact the agency.

What we collect

Category	Examples	Source
Account and contact	Name, work email, phone, organization or agency, job title	You or your organization
Mobile and SMS	Mobile number, SMS opt-in record and time, push notification token	You, when you opt in
Product activity	Bills and keywords followed, searches, questions asked, settings, features used	Your use of the products
Device and usage	IP address, browser type, pages visited and times	Automatically, including cookies
Customer Data	Records, documents, notes and connected system content that your organization puts into a product	Your organization
Public data	Legislators, lobbyists, hearing speakers and other names that appear in legislative and government records	Legislatures and public sources
Communications	Support requests, demo bookings, emails with us	You

Our products use no third-party analytics and no advertising cookies. They use only necessary and functionality cookies, to keep you signed in and remember your settings. The dataflo.ai website uses Google Analytics to understand how visitors use the site. You can opt out by blocking cookies in your browser or by installing Google’s Analytics opt-out add-on. We treat a Global Privacy Control signal from your browser as a request to opt out of the sale or sharing of your personal information, although we do not sell or share it.

How we use it

To provide, secure, maintain and support the products and your account
To send the alerts and notifications you choose, by email, push or SMS
To perform contracts with our customers, including government contracts
To improve our products, using de-identified and aggregated usage data
To send service messages, and product news you can opt out of
To meet legal obligations, including procurement, records and public records laws
To protect against fraud, abuse and security threats

We do not use personal information to make automated decisions that have legal or similarly significant effects on you.

AI processing

Some features use AI to summarize, transcribe, answer questions, classify records and propose redactions. Features that process customer data run on third-party AI models hosted within Dataflo’s own cloud environment, in US regions only. Customer data is not shared with model developers, and the hosting provider does not store it or use it to train any model. Billflo may also use third-party AI providers to process publicly available legislative data. No customer data is sent to these providers. We do not use customer data, prompts or AI output to train generalized models without the customer’s written consent.

Service providers that host, secure and operate our products, such as cloud hosting, AI model, email, SMS delivery, analytics and support tools. They may use the data only to provide services to us. Our current subprocessor list is available on request at support@dataflo.ai.
Your organization. If you use a product through your employer or agency, its administrators can see your account and activity.
Government agencies you contact. If you submit a public records request through Govflo, it goes to the agency that runs that portal.
Legal and safety. When the law requires it, such as a valid court order, or to protect rights, safety and security.
Business transfers. If Dataflo is involved in a merger, acquisition or sale of assets, subject to this policy’s protections.
With your consent.

We do not sell personal information or share it for cross-context behavioral advertising. Mobile numbers and SMS opt-in data are never shared with third parties or affiliates for their marketing.

Billflo

Legislative records. Billflo shows names and statements of legislators, witnesses, lobbyists and others as they appear in public legislative records and hearings. We collect these from official sources. Because they are public records, we may not be able to delete them on request, but we will correct errors in our copy when the official source is corrected.
SMS alerts. If you opt in, we use your mobile number only to send the alerts you choose and messages about your account. Message frequency varies with legislative activity. Message and data rates may apply. Reply STOP to opt out or HELP for help, or turn alerts off in Settings. We keep a record of your opt-in and opt-out. Your mobile number and consent are not shared with third parties for marketing. See the SMS consent terms.
Mobile apps. The Billflo iOS and Android apps collect only sign-in details, in-app usage and a push notification token. They do not collect your location or contacts.

Govflo

Agency records. Records that an agency searches, reviews or redacts in Govflo belong to the agency. They may include personal information about members of the public, employees and others. We process them only to provide Govflo to that agency and under its contract. Questions about those records go to the agency.
Connected systems. When an agency connects a third-party system, Govflo reads content only within the permissions the agency grants and only to process requests.
Requesters. If you submit a request through a Govflo portal, we collect your name, contact details, request text and any attachments, and send them to the agency. Your request and the agency’s response may themselves be public records under applicable public records laws. Do not include information you want kept private.

How long we keep it

Customer Data: as the customer’s contract and records retention schedule require. On the customer’s request, we delete it within 30 days after the contract ends.
Account data: while your account is active. On request, we delete it within 30 days after your account closes or your organization’s contract ends.
Backups: kept for no more than 30 days, so deleted data leaves our backups within that time.
System logs: kept for up to one year, for security and troubleshooting.
SMS consent records: for as long as the law requires us to prove consent.

Security and location

We protect data with encryption in transit and at rest, access controls and multi-factor authentication. Our controls are independently audited under SOC 2. We host the products in the United States, and AI processing of customer data runs in US regions only. Some of our engineering staff work outside the United States and may access systems to support the products, under confidentiality obligations and the access limits in our customer contracts. They access production systems only through secured, logged US-based systems, without downloading customer data. No system is perfectly secure, and we will notify affected customers and users of a breach as the law requires.

Your choices and rights

Update or delete your account in Settings, or by emailing support@dataflo.ai.
Marketing emails: use the unsubscribe link. Service messages about your account still arrive.
SMS: reply STOP, or turn alerts off in Settings.
Push notifications: turn them off in your device settings.
Privacy rights. Depending on where you live, you may have the right to access, correct, delete or port your personal information, to object to or restrict processing, and to appeal our decision. Email support@dataflo.ai. We verify requests before acting and respond within the time the law requires. We will not treat you differently for using these rights.
Data an organization controls. If your data is in a product through your employer or a government agency, we will pass your request to that organization, which decides it.
Public records. Rights to delete may not apply to information in public legislative or government records.

Children

Our products are for professional and government use and are not directed to children under 13. We do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.

Changes

We will post updates here with a new effective date. For material changes, we will also notify users by email or in the product.

Contact

Dataflo LLC, 100 Sun Avenue NE, Suite 650, Albuquerque, NM 87109. Email: support@dataflo.ai. Phone: provided on request.