Privacy Policy
What we hold, who else touches it, and what you can ask us to do about it.
Version 2026-09-08. We record which version you accepted, and when.
What this covers
How The Code Source handles information in TakiFlo. There are two different kinds and they are worth keeping apart: information about you as our customer, and information you put into TakiFlo about your own work and your own customers.
For the first we are the controller. For the second you are the controller and we are processing it on your instructions.
What we collect about you
Your name and email address, your organisation's name, and the roles and access you have been given.
Records of things that matter later: when you accepted these documents and which version, together with the IP address and browser the acceptance came from. Sign-in activity. Usage counts for jobs and notifications, because they are what your plan is measured in.
Payment details are handled by Stripe. We never see or store your card number.
What you put into TakiFlo
Your workflows, jobs, stage history, and the email addresses and phone numbers you configure for notifications — which frequently belong to your own customers rather than to you.
We store it, we process it to run the service, and we do not look at it except where we have to in order to fix a problem you have reported or to meet a legal obligation.
Who else processes it
Running TakiFlo means other companies handle some of this data on our behalf. As of 2026-09-08 they are:
MonsterASP — hosting for the application and the database, meaning everything above is stored on their infrastructure.
Vercel — hosting for the web interface.
Stripe — payments, subscriptions and card details.
Pingram — delivery of the emails and text messages your workflows send, which means the recipient addresses and numbers you configure.
We will update this list when it changes.
How long we keep it
Your workflows and jobs for as long as your account exists. Delete your account and they go with it.
If a subscription ends and is not renewed, ninety days from the day access stopped — then they are deleted automatically. A warning goes to the account owners a fortnight before that date.
Records of terms acceptance are kept after an account closes, because their whole purpose is to show what was agreed and when.
Billing records are kept for as long as tax and accounting rules require.
Your rights
You can ask for a copy of the information we hold about you, ask us to correct it, or ask us to delete it. Write to jason.r.bondarchuk@gmail.com and we will respond within a month.
Where the data belongs to your own customers rather than to you, those requests come to you first — you are the controller, and we will help you answer them.
Security, honestly stated
Passwords are stored hashed and never in a recoverable form. API keys and session tokens are stored hashed. Access is separated by organisation, and by role and area within one.
We are not certified against any security standard and we do not claim to be. TakiFlo is early-stage software. If your organisation requires a certified processor, it is not the right choice for you today.
Contact
Questions, or a request about your data: jason.r.bondarchuk@gmail.com.
These documents are written in plain language on purpose. If something here is unclear, ask us rather than guessing.