Privacy Policy

Effective Date: 8 October 2026

At Mergeflo (“we,” “our,” or “us”), your privacy is a priority. We do not sell, rent, or share your personal data with third parties for marketing purposes. Our practices comply with GDPR and CCPA requirements.

Information We May Collect

We may collect:

• Essential Information – Name, email address, phone number, and other contact details you provide.
• Usage Data – IP address, browser type, device information, interactions with our platform, and activity within automation or AI features.
• Cookies and Analytics Data – Which pages of our website you visit and which links you click, as described in Analytics and Cookies below.

How We Use Your Information

We process your data only for purposes you have agreed to or that are necessary to:

• Deliver and improve Mergeflo’s services, including agentic workforce management and content automation.
• Respond to your requests and provide support.
• Personalize and optimize your experience on the platform.
• Meet legal or regulatory requirements.

Data Sharing Policy

We do not sell, trade, or share your personal information with advertisers or unrelated third parties.

GDPR and CCPA Rights

If you are in the EU/EEA, UK, or California, you have the following rights:

• Access – Request a copy of your personal data.
• Correction – Correct inaccurate or incomplete data.
• Deletion – Request erasure of your data, subject to legal retention rules.
• Opt-Out of Sale – We do not sell personal data, but you may confirm this.
• Data Portability – Receive your data in a portable format.

To exercise these rights, email us at support@mergeflo.com.

Google User Data

When you connect Google Search Console or Google Analytics to Mergeflo, we ask Google for read-only access. We never change your Search Console or Analytics settings or data.

• What we read – For the Search Console property you choose: search performance for your pages (queries, impressions, clicks and average position) and the index status Google reports for your pages. For the Google Analytics property you choose: reports for your pages (page views, engagement and traffic sources), plus the list of your Analytics accounts and properties so you can pick the right one. We also read the email address of the Google account you connect, to show you which account is linked.
• How we use it – Only to show you how your own content performs and to recommend what to write or fix next, inside your Mergeflo workspace.
• Who we share it with – No one, except the service providers that run Mergeflo on our behalf, such as our hosting provider and the AI model providers we use to prepare your recommendations. We do not sell Google user data and do not use it for advertising.
• AI and machine learning – We do not use Google user data to develop, improve or train generalised or non-personalised AI or machine learning models.
• How we store it – The access tokens Google gives us are kept in storage that only Mergeflo’s servers can read. They are never sent to your browser.
• Disconnecting and deletion – You can disconnect Google at any time in Settings → Connections, which deletes the stored access tokens straight away. You can also revoke access at myaccount.google.com/permissions. Search and Analytics figures we have already copied stay in your workspace so your history is kept; to have them deleted, email us at support@mergeflo.com.

Mergeflo’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Analytics and Cookies

On mergeflo.com we use Google Analytics to see which pages people find useful and which links they click, such as “Start free” and “Book a demo”. When you create an account, app.mergeflo.com sends Google Analytics one “sign up” event, so we can tell which pages lead to new accounts. The app sends nothing else to Google Analytics.

• Cookies we use – _ga and _ga_*, set by Google Analytics to count visits (they last up to 2 years), and mf_consent, which remembers your cookie choice for 6 months.
• No advertising – We do not use advertising cookies. Google signals, which links visits to Google accounts for advertising and cross-device reports, is turned off.
• How long Google keeps it – Event-level data is kept for 2 months. User-level data is kept for 14 months.
• Your choice – If you are in the EU/EEA, the UK or Switzerland, analytics cookies stay off until you click Accept. Until then Google may still receive signals without cookies (for example, that a page was viewed), with nothing stored on your device. Elsewhere, analytics cookies are on by default and you can turn them off with Decline. Your choice applies on both mergeflo.com and app.mergeflo.com.

Change your cookie choice. You can also block Google Analytics on every website with Google’s opt-out browser add-on.

Data Security

We implement industry-standard security measures — encryption, secure servers, and access controls — to protect your data from unauthorized access, misuse, or loss.

Changes to This Policy

We may update this Privacy Policy to reflect operational, legal, or regulatory changes. Updates will be posted on this page with a new effective date.