AG Flow Privacy Policy

Effective and last updated: July 24, 2026

AG Flow is business-management software operated by AI Growth from Lebanon. This policy covers the AG Flow Android and iOS apps, AG Flow web application, cloud API, synchronization, catalog, backup, and related support. The separate website privacy policy covers marketing-site visitors and demo requests.

1. Who controls business data

The client business controls the customer, employee, supplier, transaction, accounting, project, and operational records it enters into AG Flow. AI Growth processes cloud data to provide the service, maintain security, and provide support. Businesses are responsible for having a lawful reason to enter and use personal information about their customers, employees, and suppliers.

2. Information AG Flow may process

• Account information: name, email address, password verifier, user ID, business membership, role, and authentication/session records.
• Business profile: business name, logo, phone numbers, email, address, map location, social links, currency, settings, modules, and subscription or license status.
• Business operations: products, prices, stock, customers, suppliers, sales, purchases, invoices, payments, expenses, accounting entries, reports, projects, employees, attendance, vehicles, work orders, visits, reminders, loyalty, and custom fields.
• Images and files: product or business images, imports, exports, invoices, receipts, and backup files selected or created by the user.
• Location: precise location only when a user chooses the map location feature and grants permission. Saved map links may be attached to a business, customer, supplier, visit, or job.
• Technical information: IP address, request time, requested API path, request ID, app version, device/platform information, and security or diagnostic events.
• Support information: messages and details voluntarily provided when requesting assistance or account deletion.

3. Local, synchronized, and cloud modes

Local or offline mode

Core records are stored in an encrypted database on the device. AI Growth does not receive those records unless the user enables cloud synchronization, publishes catalog content, uploads images, requests support with an export, or uses another online feature.

Synchronization mode

When cloud synchronization is enabled, selected business records are transmitted over encrypted HTTPS and stored on AI Growth-managed cloud infrastructure for backup, restoration, and authorized web access.

Cloud-engine mode

For businesses configured for the cloud engine, supported transactions and records are stored and processed by the AG Flow cloud service. Access is limited to authenticated users with membership in that business.

4. Device permissions and optional features

• Camera: scans barcodes and captures product or business images. Audio recording is disabled.
• Photos and files: lets the user select images, import spreadsheets, export documents, and create or restore backups.
• Location: centers the optional map picker on the user's position after permission is granted.
• Notifications: provides reminders and operational alerts selected by the user.

Permissions can be denied or revoked in device settings. The related optional feature may then be unavailable.

5. Third-party services

• Google Sign-In and Google Drive: optional sign-in and backup. Backups are stored in the user's private Google Drive app-data folder. Google processes this data under its own privacy terms.
• Google Maps: optional map display and location selection. Google may receive location and standard web/device request information when the feature is used.
• Anthropic: optional AI invoice scanning sends the invoice image and extraction instructions to Anthropic only when the feature is configured and the user requests a scan.
• Expo Application Services: application builds and secure application updates.
• Sentry: optional crash and performance diagnostics when enabled. Diagnostic events may include app, device, stack-trace, and request context; AG Flow does not intentionally add business records to crash reports.
• Hosting and email providers: infrastructure, backups, security, transactional communication, and support.

6. How information is used

• Provide app functions, synchronization, backup, restoration, catalogs, reports, and authenticated web access.
• Protect accounts, prevent abuse, investigate errors, and maintain service reliability.
• Manage licenses, subscriptions, client support, and required service communication.
• Comply with applicable legal, accounting, security, and regulatory obligations.

AI Growth does not sell personal data and does not use AG Flow business records for third-party advertising.

7. Public catalogs and user-directed sharing

A business can choose to publish selected business contact details, branding, products, images, prices, opening hours, and ordering information in a public catalog. Users can also choose to share invoices, reports, locations, and order text through apps installed on their device. The user or business controls these actions and should review content before publishing or sharing it.

8. Security

AG Flow uses encrypted local storage for supported mobile data, secure operating system storage for keys and sessions, HTTPS in transit, authentication, tenant access controls, backups, and operational monitoring. No system can guarantee absolute security. Users must protect their devices, passwords, exports, and shared documents.

9. Retention and deletion

Local records remain on the device until the user deletes them, clears app data, or uninstalls the app. Google Drive backups remain in the user's Google account until removed by the user or by AG Flow acting with the user's authorization. Cloud records are retained while needed to provide the service and protect it.

Users can request deletion from inside AG Flow or through the external account-deletion page. After identity and authority are verified, AI Growth deletes or anonymizes the account and associated cloud data unless retention is required for security, fraud prevention, disputes, legal obligations, or records controlled by a client business with other authorized users. Any necessary retention will be explained during the request.

10. Children

AG Flow is business software and is not directed to children.

11. Changes

This policy may be updated when features, providers, or legal requirements change. The effective date above will be updated, and material changes may also be communicated in the app or through account contact details.

12. Contact

Email: haismail164@gmail.com
WhatsApp/phone: +961 78 868 973
Location: Lebanon