Privacy Policy

Who we are

Cuflo is a marketing platform operated by SME Growth Limited (NZBN 9429051641706), a New Zealand company. We help marketing agencies and their clients consolidate brand knowledge, campaign data, and AI-generated content in one place.

If you have questions about this policy or how your data is handled, email privacy@smegrowth.ai.

What we collect

When you use Cuflo, we collect:

• Account information - name, email, authentication details
• Business information - anything you record about your business or your clients' businesses (brand voice, products, contacts, pricing, etc.)
• Connected-service tokens - when you connect platforms like Google Analytics, Google Ads, Meta Ads, Xero, ServiceM8, etc., we store the OAuth tokens needed to fetch your data. Tokens are encrypted at rest.
• Data fetched from connected services — metrics, campaigns, customer records, and similar data pulled on your behalf from the platforms you connect.
• Competitor research data - for competitors you choose to track, we fetch publicly available information including ads from Meta's Ad Library and Google's Ads Transparency Center, and we snapshot their public websites.
• Usage information - basic logs of how the platform is being used (page views, action timestamps) so we can debug and improve the product.

How we use it

• To provide the Cuflo service you signed up for
• To generate AI content (drafts, summaries, recommendations) from the knowledge and data you've given us
• To send transactional emails on your behalf (e.g. review requests, NPS surveys) when you've configured those flows
• To debug and improve the platform - never to sell or share your data for marketing purposes

Sub-processors we rely on

Cuflo is built on top of trusted infrastructure providers and AI services. Your data passes through these services for specific, scoped purposes:

• Supabase - database + authentication (data location: Sydney, Australia region for Cuflo)
• Vercel - application hosting
• Anthropic (Claude) - AI processing for generating drafts and summaries. Anthropic does not train its models on data submitted via the API.
• Google, Meta, Microsoft, LinkedIn, Xero, ServiceM8, etc. - platforms you choose to connect for data sync. We only access scopes you authorise.

We don't share your data with any third party for advertising or marketing purposes.

How long we keep it

We retain your data for as long as your account is active. If you delete your account, we remove your data within 30 days, except where law requires us to retain certain records (for example, billing records under NZ tax law).

Time-series data we've pulled from connected services (e.g. historical ad metrics, SEO snapshots) accumulates for as long as your account is active so you can see long-term trends. You can ask us to delete specific historical data at any time.

Your rights

Under the New Zealand Privacy Act 2020, you have the right to:

• Access the personal information we hold about you
• Correct anything that's wrong
• Request deletion of your data
• Complain to the Office of the Privacy Commissioner if you believe we've mishandled your data

To exercise any of these rights, email privacy@smegrowth.ai and we'll respond within 20 working days.

Security

All connections to Cuflo are encrypted (HTTPS). OAuth tokens and sensitive credentials are encrypted at rest in our database. Access to production data is restricted to the SME Growth engineering team. We don't store passwords ourselves - authentication is handled by Supabase Auth.

Cookies

Cuflo uses cookies only for essential purposes - keeping you logged in and remembering UI preferences. We don't use third-party advertising or analytics cookies.

Children

Cuflo is a business tool and is not intended for use by anyone under 18.

Changes to this policy

We may update this policy as Cuflo evolves. When we do, we'll update the "Last updated" date at the top. For material changes (e.g. new sub-processors, new categories of data), we'll notify account holders by email.

Contact

SME Growth Limited
New Zealand
privacy@smegrowth.ai