What we hold, and what we never do with it.

1. What we collect

From an agency: the legal name of the business, its owner’s name, address, EIN, email, phone, and the bank account it settles into.

From a contractor: legal name, working name, email address, the state you are in, the bank account a transfer is made to or from, and — where the law requires us to report a payment — a taxpayer identification number.

If you opt in to text messages: your mobile number, the exact wording of the consent you were shown, the date and time you gave it, and the IP address it was given from. We keep the wording because a record of what you actually agreed to is worth more than a flag saying that you did.

From your bank, through our payment provider: the deposits and transfers relevant to settling a commission — the amount, the date, and the description the bank puts on it.

Automatically: ordinary security and audit records — sign-in times, IP addresses, and the actions taken on an account.

2. What we never collect

We never ask for, receive, or store the login details of any platform you earn on. There is no integration that uses your session, and no part of OnlyFlow works by signing in as you. We also never receive your online banking password — a bank connection is made through a licensed provider and hands us a token, never a credential.

3. What we use it for

• Working out what is owed under a contract, and moving that amount.
• Sending the written notice of the exact amount before every transfer.
• Sending account alerts and sign-in codes, if you asked for them.
• Meeting tax-reporting obligations, and keeping the records a payment network requires.
• Detecting fraud and keeping accounts secure.

We do not use any of it to build advertising profiles, and we do not do behavioral advertising at all.

4. Your phone number

We do not sell or share your phone number, and we do not share mobile opt-in data or consent with any third party for marketing purposes.

Your number is disclosed to exactly one kind of company: the messaging provider that delivers the message to your handset, which processes it only to deliver that message. It is not passed to advertisers, data brokers, affiliates, or any other agency.

You can remove it at any time by replying STOP to a message, by deleting it in your account, or by writing to support@onlyflow.pro.

5. What your agency can see

An agency sees what it needs to settle its own commission: the payouts that arrived, the contractual percentage, and the resulting amount. It does not get access to your bank account, your balance, or your transaction history. A chatting agency working under a management agency sees only its own engagement, and never learns the names of contractors it does not work with.

6. Who else we share with

Only the companies that make the product work, and only for that purpose:

• Our payment provider — to connect a bank account and make a transfer.
• Our email provider — to send notices and confirm they were delivered.
• Our messaging provider — to deliver a text, if you opted in.
• Accounting software — only where an agency has connected its own QuickBooks or Xero, and only that agency’s own records.
• Tax authorities — where a filing is required by law.

We do not sell personal information, and we have not done so.

7. How long we keep it

Records of a transfer, the authorization behind it, and the notice we sent about it are kept for as long as the payment network and tax law require — several years — because they are the evidence that a transfer was authorized and disclosed. Your phone number and messaging consent are deleted when you withdraw them, apart from the minimum record that you withdrew, which is what stops us texting you again.

8. Security

Traffic is encrypted in transit. Taxpayer identification numbers and connected-account credentials are encrypted at rest under separate keys, so that access to one store does not hand over the other. Access is limited to the people who need it, and account actions are logged.

9. Your choices

• Ask for a copy of what we hold about you, or ask us to correct it.
• Withdraw your bank authorization, and disconnect the account.
• Stop text messages, at no cost and with no effect on your payments.
• Ask for deletion, subject to the records we are legally required to keep.

Write to support@onlyflow.pro and we will respond within 30 days.

10. Children

OnlyFlow is for businesses and the adults who contract with them. It is not directed at anyone under 18 and we do not knowingly collect information from anyone under 18.

11. Changes

If this policy changes we will update the date at the top. Where a change affects what we share or how we message you, we will tell you directly.

12. Contact

OnlyFlow LLC — support@onlyflow.pro