Last updated: 1 May 2026
This Privacy Policy explains how PsychFlo (“we”, “us”, “our”) collects, uses, stores, and protects personal data in connection with our workforce intelligence platform. It applies to all users of our website and platform services.
PsychFlo is a software company providing AI-powered workforce intelligence services to organisations globally. Our platform helps employers understand and address workforce risk — including burnout, attrition risk, and team dysfunction — using passive behavioural signal analysis.
For the purposes of GDPR and applicable data protection legislation, PsychFlo acts as:
Contact: info@psychflo.com
2.1 Website and enquiry data
When you visit our website or submit an enquiry, we may collect: your name, work email address, company name, role, and the content of your message. We use this to respond to your enquiry and, with your consent, to send you relevant communications.
2.2 Platform account data
When your organisation subscribes to PsychFlo, we collect: account holder name and email, organisation name, billing information (processed by Stripe — we do not store card details), and platform usage logs.
2.3 Workforce behavioural signals (processed on behalf of client organisations)
The core function of PsychFlo involves processing aggregated behavioural metadata on behalf of our client organisations. This includes:
Important: PsychFlo never accesses the content of messages, emails, documents, or meeting recordings. All signals are metadata only. All outputs are aggregated at team level (minimum five members) — individual-level outputs are not produced by design.
We rely on the following lawful bases under GDPR Article 6:
Contractual necessity (Art. 6(1)(b))
Processing required to deliver our platform services to organisations under contract
Legitimate interests (Art. 6(1)(f))
Responding to enquiries, improving our platform, fraud prevention, and security monitoring
Legal obligation (Art. 6(1)(c))
Compliance with applicable financial, tax, and employment law obligations
Consent (Art. 6(1)(a))
Marketing communications to website visitors and newsletter subscribers (withdrawable at any time)
Where PsychFlo processes employee data as a Data Processor on behalf of a client organisation, the lawful basis is determined and maintained by the client organisation (Data Controller). We process employee data only under documented instruction via a Data Processing Agreement (DPA).
We use personal data to:
We do not sell personal data to third parties. We do not use employee behavioural data for advertising profiling. We do not make automated decisions about individual employees that produce legal or similarly significant effects without human review.
PsychFlo stores all personal data within the EU region using Supabase. We do not transfer personal data outside of agreed jurisdictions without appropriate safeguards.
Where sub-processors are used (see Section 7), we ensure appropriate data transfer mechanisms are in place, including standard contractual clauses (SCCs) where required under GDPR Article 46.
We use the following sub-processors to deliver our services:
You have the following rights regarding your personal data:
Right of access
Request a copy of the personal data we hold about you
Right to rectification
Request correction of inaccurate or incomplete data
Right to erasure
Request deletion of your data where we have no lawful basis to retain it
Right to restriction
Request that we limit processing of your data in certain circumstances
Right to portability
Receive your data in a structured, machine-readable format
Right to object
Object to processing based on legitimate interests or for direct marketing
To exercise any of these rights, contact us at info@psychflo.com. We will respond within one calendar month. You also have the right to lodge a complaint with your relevant data protection supervisory authority.
Our website uses essential cookies required for authentication and session management. We do not use advertising or tracking cookies. We use analytics (aggregated, anonymised) to understand page performance. You may disable non-essential cookies in your browser settings at any time.
We may update this Privacy Policy from time to time. We will notify active clients of material changes by email at least 30 days before they take effect. The “Last updated” date at the top of this page reflects the most recent revision.
For any privacy-related questions, data subject requests, or to request a copy of our Data Processing Agreement:
PsychFlo · Data Controller
Email: info@psychflo.com
Subject line: “Privacy Request — [your name]”
Data protection registration in progress