Legal centre
The agreements and policies that govern EarnFlow, written to be read. Questions: legal@earnflow.ca.
Terms of Service
The agreement between your organization and EarnFlow: accounts, subscriptions, trials, fees, data, AI features, liability and termination.
ReadPrivacy Policy
What we collect, why, who we share it with, how long we keep it, your rights, our AI provider and account deletion.
ReadText Messaging Terms
How businesses text their customers through EarnFlow: consent, message frequency, STOP and HELP, rates and privacy.
ReadCookie Policy
The handful of strictly necessary cookies and local storage EarnFlow uses, and the absence of advertising trackers.
ReadAcceptable Use Policy
What you may not do with EarnFlow, including anti-spam rules for customer communications.
ReadAccessibility Statement
Our WCAG 2.1 AA commitment, current status and how to report a barrier.
ReadSecurity Overview
The technical and organizational measures that protect customer data.
ReadWho processes customer data on our behalf
Updated October 10, 2026. We notify customers of additions by email at least 30 days before a new subprocessor handles customer data.
| Subprocessor | Purpose | Location |
|---|---|---|
| Hosting provider (virtual private server) | The server that runs the Service: application, PostgreSQL database, document storage, backups | Canada |
| Stripe, Inc. | Subscription billing; online, QR-code and Tap to Pay invoice payments through Stripe Connect and Stripe Terminal | United States (global) |
| Twilio Inc. | Customer texting from each organization's business number, carrier registration, and text-message delivery of sign-in verification codes | United States (global) |
| Anthropic, PBC | Language-model processing for AI drafting features, with the person's consent | United States |
| Google LLC (Maps Platform) | Geocoding addresses, map display, routing and drive-time estimates | United States (global) |
| Google LLC (Firebase Cloud Messaging) | Push notification delivery to the Android app | United States (global) |
| Cloudflare, Inc. (Turnstile) | Bot and spam protection on online booking pages | United States (global) |
| Transactional email provider | Delivery of estimates, invoices, visit updates, reminders and account email | United States / Canada |
| Apple Inc. (APNs) | Push notification delivery to the iPhone app | United States (global) |
Services an organization connects itself, such as QuickBooks Online (Intuit), are governed by the organization's own agreement with that provider and are not EarnFlow subprocessors.
Each subprocessor is bound by a written agreement with confidentiality and security obligations no less protective than ours, and none may use customer data to train models or for its own purposes.
Data Processing Agreement
Customers who need a DPA, including Standard Contractual Clauses for transfers from the EEA or UK, can request our standard DPA. It incorporates the subprocessor list above and our security overview.
Request the DPAEnterprise agreements
Custom terms, invoicing, longer commitments and a manual plan outside card billing are available for larger organizations and franchises.
Contact salesTrademark
EarnFlow and the EarnFlow mark are trademarks of EarnFlow. Press and partners may use them to refer to EarnFlow with the assets in the Newsroom; please don't alter them or imply endorsement.
Copyright and abuse
Report content that infringes your rights, or misuse of EarnFlow, to legal@earnflow.ca. Include the URL or identifier, the right concerned and your contact details.