This Privacy Policy explains how NextWave collects, uses, discloses and protects personal information when you use Flow at flow.nextwave.au. We comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles.
We collect: account details (name, email, password); your business details (business name, trade, phone number, website); contact details of your customers that you bring into Flow (names, phone numbers, email addresses); message and call-event records; usage and device data; and billing details (processed by our payment provider, not stored by us).
To provide and run Flow for you (capturing enquiries, sending follow-ups, reporting recovered revenue); to operate your account, trial and billing; to provide support; to improve and secure the service; and to meet legal obligations.
When you use Flow to message your customers, you are responsible for having a lawful basis and consent to contact them under the Spam Act 2003 (Cth). Flow includes opt-out handling (STOP), and we suppress contacts who opt out. We act as your service provider for these communications.
We use trusted providers to run the service, each handling data on our behalf: Supabase (database and authentication), Twilio (SMS), Resend (email), Stripe (payments), Inngest (workflow processing) and Vercel (hosting). We do not sell your data or share it between customers.
Data may be processed and stored in Australia and overseas (including the United States and EU) by the providers above. We take reasonable steps to ensure your information is handled securely and in line with this policy.
We use encryption in transit, row-level access controls that isolate each business’s data, and least-privilege access. No system is perfectly secure, but we work to protect your information and will notify you of any eligible data breach as required by law.
We keep personal information while your account is active and as needed to provide the service and meet legal obligations. You can request export or deletion of your data at any time.
You may access or correct your personal information, ask us to delete it, or complain about how we handle it by emailing ns@nextwave.au. If you are not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC).
We use essential cookies to keep you signed in and to run the app. We do not use advertising trackers.
We may update this policy and will post changes here. Contact us at ns@nextwave.au or NextWave, Melbourne, Australia.