GoLiveFlow is operated by Full Circle Solutions LLC (“GoLiveFlow,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit goliveflow.com, use the GoLiveFlow application at app.goliveflow.com, communicate with us, or otherwise use our services (collectively, the “Service”).

GoLiveFlow is primarily a business-to-business service. In many cases, a customer organization determines what information about its employees, clients, contacts, and other users is entered into GoLiveFlow. When we process that information on the customer’s behalf, the customer controls the purposes for which the information is used and GoLiveFlow acts as a service provider or processor. For information we collect for our own business purposes, Full Circle Solutions LLC acts as the controller or business responsible for that information.

1. Information We Collect

1.1 Information You Provide to Us

Account information — such as your name, work email address, organization, account credentials, role, and other information used to create and manage your account.
Demo, sales, and contact information — such as your name, work email, company name, company size, current onboarding or implementation tools, and information you include in a demo request, inquiry, or other communication.
Billing and subscription information — such as subscription plan, billing status, transaction information, and related account information. Payment card information is collected and processed by Stripe. GoLiveFlow does not store full payment card numbers.
Support and communications — information you provide when you contact us for support, respond to surveys, provide feedback, or otherwise communicate with us.
Customer Data — project records, tasks, milestones, implementation plans, client and contact records, documents, messages, notes, financial or project-tracking information, approvals, signatures, and other information submitted to the Service by or on behalf of a customer.

1.2 Client Portal and Invited Users

Customers may invite their own clients, stakeholders, employees, contractors, or other contacts to portions of GoLiveFlow, including the Client Portal. Invited users may access the Service through a magic link or other authentication method. We may process their name, email address, authentication information, project information made available to them, information they submit, and their activity within the Service.

When a customer provides this information to GoLiveFlow, we generally process it on that customer’s behalf. If you are an invited user and want to exercise rights relating to information controlled by that customer, you should normally contact the customer directly. We will assist our customers with privacy requests as required by applicable law and our agreements with them.

1.3 Information Collected Automatically

When you use the Service, we may automatically collect information such as:

first-party application and Client Portal activity records used for operational, audit, security, and product functionality;
authentication, session, diagnostic, error, and security information where needed to operate or protect the Service; and
information used to detect fraud, abuse, bots, unauthorized access, or other security threats.

GoLiveFlow does not currently use third-party advertising or general web-analytics services to track pages or screens viewed across the Service. When a Client Portal contact completes a task-level electronic approval, GoLiveFlow records the IP address and user-agent information associated with that approval request as part of the audit trail. IP addresses are not collected as general application-wide analytics, and no third-party IP-address lookup service is used for this approval process.

1.4 Cookies, Local Storage, and Similar Technologies

Marketing site: GoLiveFlow currently does not use advertising cookies or behavioral advertising trackers on goliveflow.com. The site may make requests to service providers necessary to deliver site functionality, including Google Fonts and Cloudflare Turnstile. Cloudflare Turnstile is used on forms to help distinguish legitimate users from automated or abusive traffic and may use short-lived technical data necessary to perform that function.

Application: app.goliveflow.com uses browser local storage to persist authentication session information and keep users signed in. The application does not currently use cookies for GoLiveFlow authentication.

If we later introduce analytics, advertising, or other non-essential tracking technologies, we may update this Policy and provide any consent or opt-out mechanisms required by applicable law.

2. How We Use Information

We may use personal information to:

provide, operate, maintain, and secure GoLiveFlow and the Client Portal;
create and administer accounts and authenticate users;
provide project, workflow, collaboration, reporting, automation, approval, and related functionality requested by customers;
process trials, subscriptions, billing, upgrades, downgrades, and account administration;
respond to demo requests, questions, support requests, and other communications;
send service-related communications such as authentication messages, project notifications, task alerts, overdue or SLA alerts, digests, approval confirmations, billing notices, and security notices;
provide integrations that a customer chooses to enable;
provide AI-assisted features when a user chooses to use those features;
monitor, troubleshoot, maintain, and improve the reliability, usability, security, and performance of the Service;
detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms of Service;
comply with applicable law and enforce our agreements and legal rights; and
analyze and improve our products, services, and business operations using information available to us in accordance with this Policy and our contractual obligations.

3. AI-Assisted Features

GoLiveFlow provides AI-assisted features, including risk analysis, summaries, status updates, recommendations, and natural-language interaction with project information. GoLiveFlow currently uses Anthropic’s Claude service for these features. When a user invokes an AI feature, relevant Customer Data may be sent to Anthropic to process the request. Depending on the feature, this may include project and client names, project status and dates, phase and task information, assigned personnel, engagement and SLA information, risk information, project financial or budget information, recent activity information, and prior GoLive AI conversation messages.

GoLiveFlow limits AI context queries to fields used to provide the applicable feature and does not intentionally include passwords, API keys, OAuth credentials, or other authentication secrets. GoLive AI conversation history may be retained as Customer Data for conversation continuity. We do not sell Customer Data to AI providers.

Customers are responsible for determining whether information they submit to an AI-assisted feature is appropriate for that use and for reviewing AI-generated output before relying on it.

4. How We Disclose Information

We may disclose personal information as reasonably necessary to operate the Service. This may include the following categories:

Infrastructure and hosting providers — including providers used for database hosting, authentication, file storage, application hosting, networking, and related infrastructure.
Payment providers — including Stripe for subscription and payment processing.
Email and communications providers — used to deliver transactional and service-related messages.
Security and abuse-prevention providers — including Cloudflare for services such as Turnstile.
AI service providers — when AI-assisted functionality is used.
Customer-enabled integrations — including HubSpot and Salesforce CRM integrations, Google Calendar, Slack, Zapier, and customer-configured webhook destinations. Information exchanged depends on the integration and configuration selected by the customer.
Professional advisers and vendors — where reasonably necessary for legal, accounting, security, insurance, or other legitimate business functions and subject to appropriate obligations.

If a customer enables a third-party integration, information may be exchanged with that provider as necessary to perform the requested integration. The third party’s handling of information may also be governed by its own privacy policy and the customer’s agreement with that provider.

We may also disclose information when we reasonably believe disclosure is required by law or legal process; necessary to protect the rights, safety, or security of GoLiveFlow, our customers, users, or others; necessary to investigate fraud or abuse; or related to a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar business transaction.

5. Sale of Personal Information and Advertising

GoLiveFlow does not sell personal information for money. We currently do not use Customer Data for cross-context behavioral advertising or sell Customer Data to data brokers.

If our practices materially change, we will update this Privacy Policy and provide any notices, consent mechanisms, or opt-out rights required by applicable law.

6. Data Security

We maintain administrative, technical, and organizational safeguards designed to protect personal information and Customer Data against unauthorized access, loss, misuse, alteration, and disclosure.

Current safeguards include encrypted transmission, infrastructure-level encryption at rest, authentication and access controls, and PostgreSQL Row-Level Security controls across the application’s public data schema designed to isolate customer organizations. Third-party OAuth access and refresh tokens for supported integrations, including HubSpot, Salesforce, and Google Calendar, are encrypted at the application level before storage. The encryption key is maintained separately from the database as a server-side secret.

We continue to develop our security and compliance program, including work toward SOC 2 readiness and compliance. A statement that compliance is in progress does not mean that GoLiveFlow has completed or received a SOC 2 examination or report.

No method of transmission, storage, or information-security control is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain personal information and Customer Data for as long as reasonably necessary to provide the Service, maintain customer accounts, satisfy contractual obligations, comply with law, resolve disputes, enforce agreements, maintain security, prevent fraud, and support legitimate business operations.

When an organization’s account is terminated or expires, GoLiveFlow tracks the termination date for retention purposes. Customer Data becomes eligible for deletion after a 90-day retention period unless a different period is required by law, reasonably necessary for security, fraud prevention, dispute resolution, or legal claims, or agreed in writing with the customer. Deletion of purge-eligible Customer Data is currently performed as a reviewed administrative process rather than an entirely automated deletion process. Residual copies may remain temporarily in backups and disaster-recovery systems until overwritten or deleted through normal infrastructure retention cycles.

Sales inquiries, demo requests, support communications, transaction records, and similar business records may be retained for a reasonable period based on their purpose rather than permanently by default.

8. Electronic Approvals and Audit Records

GoLiveFlow may maintain audit information relating to electronic approvals and sign-offs. Task-level approvals record the approving contact, timestamp, IP address, and user-agent information associated with the approval request. Other approval or sign-off workflows, including phase or document sign-offs, may record the actor and timestamp without recording an IP address or browser information.

9. Your Privacy Rights and Choices

Depending on where you live and applicable law, you may have rights concerning your personal information, which may include the right to request access, correction, deletion, portability, or information about how personal information is processed or disclosed. You may also have the right to object to or restrict certain processing or to withdraw consent where processing is based on consent.

To submit a privacy request concerning information GoLiveFlow controls, contact us. We may need to verify your identity before completing a request.

If your information was provided to GoLiveFlow by a customer organization, that organization may be the controller or business responsible for the information. In that situation, please direct your request to the organization first. If we receive a request relating to information we process solely on a customer’s behalf, we may refer the request to that customer or assist the customer in responding.

We will not discriminate against you for exercising privacy rights provided by applicable law.

10. International Data Transfers

GoLiveFlow is operated from the United States and uses service providers that may process information in the United States and other countries. As a result, personal information may be transferred to and processed in a country different from the country where it was originally collected.

Where applicable law requires specific safeguards for international transfers, we will use appropriate contractual or other lawful transfer mechanisms. Business customers that require additional data-processing terms may contact us regarding a Data Processing Addendum.

11. Children’s Privacy

GoLiveFlow is a business service and is not directed to children. The Service is not intended for use by individuals under 18, and we do not knowingly collect personal information directly from children through consumer-facing services. If you believe a child has provided personal information to us inappropriately, contact us so we can review the matter.

12. Third-Party Websites and Services

The Service may contain links to or integrate with third-party websites, applications, and services. This Privacy Policy does not govern the independent privacy practices of third parties. We encourage you to review their privacy policies before providing information to them or enabling an integration.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the Service, our practices, technology, legal requirements, or other circumstances. We will update the “Last updated” date when we make changes.

If we make material changes, we will provide additional notice where appropriate, such as by email to the primary account contact or through a notice in the Service.

14. Contact Us

If you have questions about this Privacy Policy or want to submit a privacy request, contact:

Full Circle Solutions LLC
Phoenix, Arizona, USA
Contact us