Turnflow Sign in

Privacy

How we handle your information

This page explains what Turnflow collects, why, and how long it is kept. It applies to the website and the questionnaire service, which are operated by CertioFlow.

Last updated 29 October 2026

What we collect

  • Your Google account name and email address, when you sign in. We request only the basic profile and email scopes; we cannot see your Google Drive, Gmail, contacts or password.
  • The files you upload: the questionnaire and your evidence documents.
  • Request details: the company name and any notes you add, and the dates your request was received and delivered.

How we use it

  • To complete your questionnaire and deliver it to you.
  • To email you about your request: a receipt, and a link when the file is ready.
  • We use service providers that process data on our behalf: cloud hosting, sign-in, email delivery, and AI processing used to prepare draft answers. They act on our instructions and do not use your documents to train their models. The subprocessors page lists them.
  • A reviewer working on your request can see your files and the drafted answers.

We do not sell your information, use it for advertising, or share it with anyone else.

How long we keep it

  • Uploaded files and the completed questionnaire are deleted 14 days after delivery.
  • Emailed download links stop working after 7 days.
  • Unpaid requests are deleted after 24 hours, and cancelled requests straight away.
  • Our host keeps encrypted daily backups of our storage for at least 7 days, so a deleted file can remain in a backup for that long before the backup expires. Backups are used only to recover from an outage.
  • A minimal record of each request (your name and email, the company name, file names, dates and status, but no file contents) is kept so your workspace history and invoices stay accurate. Ask us and we'll delete it.

Cookies

We use one cookie to keep you signed in, and a short-lived one during Google sign-in to protect it from forgery. There are no analytics or advertising cookies. We count page visits on our own server, without cookies and without storing your IP address. Our pages load their fonts from Google Fonts, which receives your IP address when the page loads.

Your choices

You can ask us to delete your files or your request history at any time by emailing hello@turnflow.dev. You can remove Turnflow's access to your Google account from your Google account's security settings.