Privacy policy

Payflo stores account metadata, invoice records, customer information and audit events required to operate the service.

Uploads such as invoice logos should be validated for file type, ownership and size before use in any customer-facing document.

API and webhook access should be logged with minimal retained payload data and scoped by workspace.