Privacy and current data practices
This notice describes the current evaluation software. Confirm approved business terms and data-processing arrangements with CivicFlow before a production deployment or use of sensitive records.
Public browsing and the synthetic demo
Public pages serve synthetic previews. Values entered into Test the product remain in that page's browser memory; the demo does not submit them to the production job database. Refresh or reset discards them.
The application has no configured advertising or analytics integration in this repository. Hosting, reverse-proxy, and framework logs may still record requests and technical errors. Their deployed collection and retention settings have not been verified by this notice.
Contact and feedback forms
The contact form stores your name, work email, company, optional role/phone, selected interest, and workflow description in PostgreSQL for inquiry review. It requires permission to contact you. Submission does not send an automated email, and no response-time commitment is implemented.
The separate municipal feedback form stores optional responder/organization details, selected evaluation answers, written feedback, and follow-up preference. Do not include confidential customer, shipment, resident, parcel, credential, or agency information in either public form.
Private accounts and workspaces
Trial registration stores your company, name, email, salted password hash, company membership, and trial dates. Auth.js session cookies support sign-in; password values are not stored as plaintext. The application checks active account, company membership, role, and trial access on the server.
Private job records contain entered customer and requester details, references, lanes, freight details, windows, carrier information, milestones, and activity history. Actor and before/after snapshots can retain details that have since changed. Database operators with privileged access can access stored information; application isolation is not a guarantee against privileged access.
Retention and questions
Trial expiration restricts access; it does not automatically delete company data. Archiving retains jobs and their history. A configurable retention schedule, automated erasure process, and customer self-service export/deletion workflow are not implemented.
Contact CivicFlow with business contact details to ask about stored data or request a private discussion. Do not include the records themselves in a public request. Confirm operator identity, approved retention, hosting/service-provider arrangements, and the handling of requests with the team before production use.
