Privacy policy
This policy explains how GyediFlow handles personal data when you visit gyediflow.com, chat with the website assistant, or create an account and use the service.
1. Who is responsible
The controller is MoveOnline Digital LLC, 306 W Redwood St, STE 4390, Baltimore, MD 21201, United States ("MoveOnline Digital", "we", "us"). GyediFlow is a product of MoveOnline Digital, which also operates through MoveOnline Digital Limited, registered in Ghana under company number CS146470726, GA-183-7744, Makola, Near Rawlings Park, Accra, Greater Accra, Ghana, and has an operational presence in Egypt.
Privacy questions and requests: info@moveonlinenow.com, or +1 240 315 1880.
Data that subscribing companies enter into their own workspaces (their customers, employees, invoices and so on) belongs to that company, which is the controller. We process it on their behalf as a processor, under the data protection terms in our Terms of service.
2. What we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Website assistant: name, email, your messages, and your phone number if you ask for a call back | Answer your question and follow up on your request | Steps you ask for before a contract; legitimate interest |
| Account: name, email, company name, workspace address, password (stored hashed) | Create your account and provide the service | Contract |
| Billing: plan, orders, amounts, bank transfer receipts | Billing and bookkeeping | Contract; legal obligation |
| Support: ticket content, replies and attachments | Resolve support requests | Contract |
| Sign-in history: IP address, browser, time | Account security and abuse detection | Legitimate interest |
| Activity log in the app: who changed what and when, with IP address | Security and audit | Legitimate interest |
| Cookies: session, CSRF protection, your language and cookie banner choices | Keep you signed in, protect forms, remember your choices | Strictly necessary; consent for anything else |
We do not sell personal data. The website assistant runs on an AI model hosted on our own servers; chats are not sent to an outside AI provider. Please do not share sensitive or payment details in the chat. This website loads no third-party analytics or advertising scripts.
3. How long we keep it
- Assistant chats in the assistant system: 90 days.
- The chat transcript is copied to the lead in our sales CRM and kept with the lead. The lead is kept while the sales conversation continues and for up to twelve months after the last contact.
- Sign-in history: 365 days. Cookie consent records: 365 days. Activity log: 730 days.
- Account data: while the account is open. After you close it, we delete the workspace data on request, and copies in backups are deleted automatically after 14 days.
- Billing records: for the period required by applicable tax, financial and company law.
- Backups: deleted automatically after 14 days.
4. Who receives it
- Our hosting provider, Hostinger, which runs the virtual server for the service. The server is located in the United States (Boston).
- Payment providers when you pay by card or PayPal: Stripe and PayPal. You enter card details with them directly; we do not store them.
- Our email delivery provider, which sends account, billing and support messages.
- An AI provider (OpenAI or Anthropic), only if your workspace turns on the AI writing tool: the text you submit to it is sent to the provider your workspace has configured.
- WhatsApp, only if you click the WhatsApp contact button yourself.
Our operations are in the United States, Ghana and Egypt, so personal data may be processed outside the country where it was collected. Where EU or UK GDPR requires it, we use a lawful transfer mechanism such as standard contractual clauses.
5. Your rights
Depending on where you live, you can ask to access, correct, delete, restrict or port your data, object to processing, and withdraw consent at any time. Email info@moveonlinenow.com. We may ask you to verify your identity first. You can also complain to the Data Protection Commission of Ghana or to the data protection authority in the country where you live or work.
6. Security
We use encrypted connections (HTTPS), a separate database for each workspace, hashed passwords and access-restricted backups. No system is completely secure. If a personal data breach occurs, we assess it and make the notifications the law requires.
7. Children
GyediFlow is a business service. We do not knowingly collect personal data from children. If you think a child has sent us data, write to info@moveonlinenow.com.
8. Changes
When this policy changes we update the date at the top, and we tell account holders about significant changes.