Privacy Policy

Last Updated: October 24, 2025

1. Introduction

EbFlo Technologies LLC ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (ebflo.tech) and when you use our services, including our self-hosted Postiz social media management platform ("Postiz") and our Meshcentral remote monitoring and maintenance services ("RMM Services").

This policy is designed with a "privacy-first" approach. We self-host our services, do not use third-party tracking cookies on our website, and will never sell your personal data.

2. Our Privacy-First Philosophy

  • No Selling Data: We will never sell, rent, or trade your personal information with any third party for their marketing purposes.
  • Self-Hosted: Our core services are self-hosted to ensure we have maximum control over data security and to minimize third-party data access.
  • Minimal Tracking: We do not use third-party analytics or advertising trackers on our main website. We do not use obtrusive cookie banners because we do not use the types of cookies that require them.
  • GDPR Compliance: This policy is intended to comply with the General Data Protection Regulation (GDPR).

3. Information We Collect

We may collect information about you in a variety of ways.

a) Information You Provide to Us

  • Account & Contact Information: When you sign up for our Services, we collect information such as your name, company name, email address, and phone number.
  • Payment Information: Our servers and applications do not directly store, process, or transmit your full credit card or financial details. All payment transactions are handled by third-party payment processors who are certified to maintain PCI DSS (Payment Card Industry Data Security Standard) compliance.
  • Service User Credentials: We collect user credentials (such as an email address and a securely hashed password) for individuals you authorize to access your instances of our Services (e.g., your employees using Postiz or Meshcentral).

b) Information We Collect Automatically

  • Website Log Files: Like most web servers, our self-hosted servers collect standard log files. This may include your IP address, browser type, operating system, and the pages you visit on our website. This data is used for website security and debugging.
  • Functional Cookies: We use essential first-party cookies (or similar technologies like local storage) to provide core functionality, such as keeping you logged in to our Services ("session cookies"). These are not used for tracking and are essential for the Services to work.

c) Service-Specific Data Collection

This is data we access or manage solely to provide the Services you have purchased.

i. For our "Postiz" Social Media Management Service:

  • Social Media Account Data: When you connect your social media accounts (e.g., Facebook, X (Twitter), LinkedIn, Instagram) to the Postiz service, we must access certain data via their respective APIs.
  • Authentication Tokens: We securely store the authentication tokens (API keys) that allow us to act on your behalf.
  • Content: We process and store the content (text, images, videos, links) that you create, schedule, and publish through the service.
  • Profile & Analytics Data: We may access your public profile information, account lists (e.g., pages you manage), and retrieve analytics/insights data (e.g., post engagement, follower counts) to display within your dashboard.
  • Usage: We use this data exclusively to provide the social media management service to you. This includes scheduling posts, publishing content, and displaying analytics. We do not share this data with any other parties, other than transmitting it to the respective social media platforms as directed by you.
  • Data Deletion: If you disconnect a social media account from our service, we will delete all associated authentication tokens and cached data for that account from our active databases.

ii. For our "Meshcentral" Remote Monitoring & Maintenance (RMM) Services:

  • Device & System Information: To provide RMM services, we install an agent on your client devices. This agent collects system information, which may include hardware specifications, installed software, performance metrics (CPU, memory, disk usage), event logs, and network status.
  • Usage: This data is used exclusively to monitor device health, provide technical support, perform maintenance, and troubleshoot issues as agreed upon in your service contract.
  • Remote Access: Any direct remote control or file access to your devices is performed only with your explicit, real-time consent for a specific support session or as pre-authorized by you under your service agreement.

4. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain our Services.
  • Process and complete transactions and send you related information, including invoices.
  • Respond to your comments, questions, and requests and provide customer service.
  • Send technical notices, updates, security alerts, and support messages.
  • Monitor and analyze trends, usage, and activities in connection with our Services.
  • Secure our website and Services and prevent fraudulent activity.
  • Comply with legal and regulatory obligations.

5. How We Share Your Information

We do not sell your data. We only share information in the following limited circumstances:

  • Service Providers: With third-party vendors who need access to such information to carry out work on our behalf (e.g., our payment gateway providers, cloud hosting partners, or other subcontractors).
  • With Your Consent: We may share information with your consent or at your direction (e.g., publishing a post to your social media account).
  • Legal Compliance: If required by law, subpoena, or other legal process, we may disclose your information if we have a good-faith belief that disclosure is reasonably necessary to comply with a legal obligation.
  • Business Transfers: In connection with any merger, sale of company assets, or acquisition of all or a portion of our business by another company.

6. Data Security

We use our self-hosted infrastructure and implement appropriate technical and organizational security measures to protect your personal data from unauthorized access, use, or disclosure. This includes encryption, access controls, and secure server environments.

7. Data Retention

We retain your personal information for as long as necessary to provide the Services to you and to fulfill the purposes described in this policy. We will also retain information as required by law or for legitimate business purposes.

8. Your Data Rights (GDPR)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights, including:

  • The right to access, update, or delete the information we have on you.
  • The right of rectification.
  • The right to object.
  • The right of restriction.
  • The right to data portability.
  • The right to withdraw consent.

You can exercise these rights by contacting us.

9. Children's Privacy

Our Services are not directed to individuals under the age of 13, and we do not knowingly collect personal information from children under 13.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

EbFlo Technologies LLC
Website: https://ebflo.tech
Email: support@ebflo.tech