Privacy Policy

Last Updated: January 15, 2026

This Privacy Policy explains how IncomeFlow Inc. ("we," "us," "our," or "IncomeFlow") collects, uses, discloses, and otherwise processes personal data when you visit our website, use our services, and interact with our platform. Please read this policy carefully. By using IncomeFlow, you acknowledge that you have reviewed and understood this Privacy Policy.

1. Cookie Categories and Consent

Essential Cookies

Essential cookies are automatically activated and do not require consent. They are necessary for core site functionality, security, and session management. Examples include:

  • session_id: Maintains your authenticated session across pages
  • csrf_token: Protects against cross-site request forgery attacks
  • cookie_consent_status: Records your cookie preference choices

Essential cookies are retained for the duration of your session or up to 12 months for preference storage. No consent is required for these cookies as they are integral to platform operation.

Analytics Cookies

Analytics cookies help us understand how users interact with our platform, including traffic patterns, page visits, and feature usage. These cookies are activated only after you explicitly accept them.

  • Tool: Google Analytics 4
  • Cookie Examples: _ga, _ga_XXXXXXXXX, _gid, _gat
  • Consent Required: Yes
  • Retention Period: Up to 14 months

Analytics data is anonymized and used to improve our services. You can opt out using the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout.

Marketing and Advertising Cookies

Marketing cookies enable personalized advertising and remarketing across Google and Meta platforms. These cookies are activated only after you accept marketing preferences.

  • Purpose: Deliver personalized ads based on your interests and browsing behavior
  • Consent Required: Yes
  • Retention Period: Up to 540 days (Google Ads default)
  • Partners: Google LLC, Meta Platforms Inc.

2. Marketing Cookies – Additional Disclosures

Third-Party Ad Serving

Third-party vendors, including Google, use cookies to serve ads based on a user's previous visits to this website and other sites on the internet. This allows us to display relevant advertisements tailored to your interests across multiple platforms.

Advertising Partners

We work with advertising partners such as Google and Meta to deliver advertisements tailored to your interests across various websites and platforms. These partners may combine data from multiple sources to create a more accurate picture of your preferences.

Remarketing

We use remarketing services to advertise to previous visitors of our website. After visiting our site, you may see our ads on other websites, apps, social media platforms, or search results you access. This helps us reach interested users and improve our marketing effectiveness.

YouTube and Google Display Network

Our advertisements may appear across Google services including YouTube, Gmail, and the Google Display Network. These ads are targeted based on your browsing history and interests as determined by our advertising partners.

Tracking Technologies in Use

We use the following tracking technologies on this website:

  • First-party and third-party cookies
  • Tracking pixels (Google Ads tag/gtag.js, Meta Pixel)
  • Device identifiers (browser fingerprinting, IP address)
  • Conversion event tags and custom events

Conversion Tracking and Measurement

We use conversion tracking to understand which advertisements lead to actions on our website such as form submissions, phone calls, or account registrations. This data allows us to measure campaign effectiveness, allocate budget appropriately, and optimize our marketing efforts. Conversion data may be shared with Google Ads and Meta for campaign analysis.

Active Advertising Technologies

The following advertising and analytics technologies are active on this site:

  • Google Ads (gtag.js / Google Tag Manager)
  • Google Analytics 4
  • Google Remarketing Tag
  • Meta Pixel (Facebook / Instagram)

Opt-Out from Personalized Advertising

You may opt out of personalized advertising at any time through the following channels:

Opting out of personalized advertising does not remove ads from your browsing experience. You will continue to see non-personalized advertisements based on the content of pages you visit and your general location.

Manage Cookie Preferences

You can manage your cookie preferences at any time by clicking the "Manage Cookie Preferences" link in the website footer. This opens a panel where you can accept or reject analytics and marketing cookies independently. Essential cookies cannot be disabled as they are required for site functionality.

3. Consent and Cookie Banner

When you first visit IncomeFlow, a cookie consent banner appears at the bottom-right corner of your screen. This banner offers three options:

  • Accept All: Activates essential, analytics, and marketing cookies
  • Reject Non-Essential: Activates only essential cookies
  • Manage Preferences: Opens a detailed panel to control each category

The banner is dismissible without accepting all cookies. Clicking "Reject Non-Essential" or closing the banner only activates essential cookies required for site operation.

Your consent choice is stored in your browser's local storage for 12 months. You may withdraw or modify your preferences at any time through the "Manage Cookie Preferences" link in the footer.

GDPR and UK Users: If you are located in the European Economic Area or the United Kingdom, this consent notice complies with the General Data Protection Regulation (GDPR) and UK GDPR. Marketing and analytics cookies are activated solely after explicit, informed, freely-given consent under GDPR Article 6(1)(a). Your consent is recorded with a timestamp and may be audited upon request.

Consent Statement: By clicking "Accept All Cookies," you consent to the storing of cookies on your device for analytics and advertising purposes, including personalized advertising delivered by Google and Meta. You may withdraw this consent at any time through the cookie preferences panel without affecting the lawfulness of processing that occurred before withdrawal.

4. Data Sharing with Advertising Partners

We share certain data with advertising partners for campaign delivery and measurement. Our primary partners and the data categories shared are:

Google LLC

Data Categories Shared:

  • Cookie identifiers and tracking IDs
  • Conversion events (form submissions, page visits)
  • Anonymized behavioral data
  • Remarketing lists and audience segments

Governed by Google's Privacy Policy: https://policies.google.com/privacy

Meta Platforms, Inc.

Data Categories Shared:

  • Pixel events and conversion data
  • Custom audiences and remarketing lists
  • Website visitor identifiers
  • Behavioral signals from your interactions

Governed by Meta's Data Policy: https://www.facebook.com/privacy/policy

Important Notice: IncomeFlow does not sell personal data to third parties. All data transfers to Google and Meta operate under Standard Contractual Clauses where applicable. Google and Meta may use this data across their own platforms and services in accordance with their respective privacy policies. We encourage you to review those policies directly to understand how these companies process your information.

We do not share sensitive personal data categories such as health status, financial account details, political affiliation, religious beliefs, or sexual orientation with advertising partners.

5. Lead Forms and Contact Requests

When you submit a contact form, request a quote, or register interest in our services, we collect the information you voluntarily provide. This typically includes:

  • Full name
  • Email address
  • Phone number
  • Your message or inquiry details
  • Primary income source (if selected)

Legal Basis for Processing: We process form submission data based on two legal grounds:

  • Consent (GDPR Art. 6.1.a): You provide consent by completing and submitting the form
  • Contractual Performance (GDPR Art. 6.1.b): Where a service relationship exists

Data Retention: Form submission data is retained for up to 2 years from the date of submission, unless a longer period is required by applicable law. After this period, your data will be securely deleted.

Your Rights: You may request deletion of your form data at any time by contacting us at [email protected]. A link to this Privacy Policy appears adjacent to every form submission button on this site. Submitting a form constitutes acknowledgment that you have reviewed this policy and consent to the processing described herein.

6. Google Services and Analytics

This website uses multiple Google services to measure performance, deliver targeted advertising, and improve user experience:

Google Analytics 4

Google Analytics 4 collects anonymized usage data including pages visited, time on site, device information, and behavioral signals. IP anonymization is enabled by default. Data retention is set to 14 months.

Opt-Out: Use the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout

Google Ads Conversion Tracking

Google Ads Conversion Tracking records when a user completes a defined action (form submission, call, or account registration) after clicking one of our ads. This data is used solely for measuring ad campaign performance and optimizing our marketing budget allocation.

Google Remarketing

Google Remarketing allows us to display ads to previous visitors across Google's advertising network including YouTube, Gmail, and partner websites. Remarketing lists are not created from sensitive data categories such as health conditions, financial status, religion, or sexual orientation.

Google Tag Manager

Google Tag Manager serves as a container that deploys tracking tags on our behalf. Google Tag Manager itself does not collect personal data; it acts as a technical infrastructure for the other Google services listed above.

Google's advertising products are governed by: https://policies.google.com/technologies/ads

7. Meta Advertising Services

This website uses the Meta Pixel to measure the effectiveness of our advertising campaigns on Facebook and Instagram. The Meta Pixel may record the following information:

  • Page views and time spent on our website
  • Specific conversion events (form submissions, registrations, purchases)
  • Custom audience membership for retargeting purposes
  • Device and browser information

Important Limitations: We do not use the Meta Pixel to collect or target users based on sensitive personal data including health status, financial situation, religion, political views, sexual orientation, or other special-category attributes prohibited under Meta's advertising policies.

Meta acts as an independent data controller for data collected via its Pixel and processed within its own platform. We are a data processor for data we send to Meta. For detailed information about how Meta processes your data, refer to Meta's Data Policy: https://www.facebook.com/privacy/policy

Manage Your Ad Preferences: To control how Meta uses your data for advertising, visit https://www.facebook.com/adpreferences/

8. Prohibited Content and Compliance

This website does not promote, sell, or facilitate access to prohibited product or service categories including:

  • Weapons and ammunition
  • Controlled substances and illegal drugs
  • Counterfeit goods
  • Unlicensed gambling services
  • Adult content and services
  • Services making false health or financial claims

All advertising conducted through Google Ads and Meta Ads complies fully with the respective platform policies. IncomeFlow maintains high standards for advertiser responsibility and regulatory compliance.

9. Landing Page Integrity and Transparency

The content of this website accurately represents the products and services advertised. We do not engage in deceptive practices including:

  • Bait-and-switch tactics
  • Content variation based on traffic source
  • Cloaking (presenting different content to users vs. ad platforms)
  • Automatic redirects or pop-up blocking content access
  • Misleading headlines or promises

The experience delivered to users arriving from paid advertisements is identical to the experience for all other visitors. We maintain this standard to ensure transparency and user trust.

10. Children's Privacy

This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If we discover that data has been collected from a person under 16 without verifiable parental consent, we will delete it promptly.

If you believe we have inadvertently collected data from a minor, please contact us immediately at [email protected] with details, and we will take appropriate action.

11. International Data Transfers

Personal data collected through this website may be transferred to and processed in countries outside the European Economic Area, including the United States, where Google LLC and Meta Platforms, Inc. maintain their principal operations.

These transfers are conducted under Standard Contractual Clauses (SCCs) approved by the European Commission, which provide appropriate safeguards for personal data. A copy of the applicable SCCs can be requested by contacting us at [email protected].

12. Your Privacy Rights (GDPR Articles 15–22)

If you are located in the European Economic Area or the United Kingdom, you have the following rights regarding your personal data:

Right of Access (Article 15)

Request a copy of all personal data we hold about you in a structured, readable format.

Right to Rectification (Article 16)

Correct inaccurate or incomplete data we hold about you.

Right to Erasure (Article 17)

Request deletion of your personal data, also known as the "right to be forgotten."

Right to Restrict Processing (Article 18)

Limit how we process your data while a dispute is resolved or your request is evaluated.

Right to Data Portability (Article 20)

Receive your data in a structured, machine-readable format and transmit it to another controller.

Right to Object (Article 21)

Object to processing of your data based on legitimate interest.

Right to Withdraw Consent (Article 7.3)

Revoke consent at any time without penalty. Withdrawal does not affect the lawfulness of processing before revocation.

How to Exercise Your Rights: To exercise any of these rights, email us at [email protected] with a clear description of your request. Include sufficient information to identify you (email address, phone number, or account details). We will respond within 30 days of receiving a valid request.

Supervisory Authority: You also have the right to lodge a complaint with your local data protection authority:

13. What Personal Data We Collect

We collect the following categories of personal data when you use our website and services:

  • Full name and contact information (email, phone)
  • IP address and location data
  • Browser type, version, and operating system
  • Device type and hardware identifiers
  • Cookies and tracking identifiers
  • Pages visited, time on site, and click patterns
  • Form submission content and preferences
  • Conversion events and interaction history
  • Search queries and site functionality usage

14. Legal Basis for Data Processing

Under the GDPR, we process your data under one or more of the following legal bases:

Consent (Article 6.1.a)

For analytics and marketing cookies, form submissions, and newsletter signups, we rely on your explicit consent.

Contractual Performance (Article 6.1.b)

Where a service relationship exists, we process data necessary to provide the services you request.

Legitimate Interest (Article 6.1.f)

For security, fraud prevention, and improvement of our services, we process data where our interests are not overridden by your fundamental rights.

15. Data Retention Periods

We retain personal data for different periods depending on the category and purpose:

Data Category Retention Period
Contact form submissions 2 years from submission
Google Analytics data 14 months
Marketing cookies (Google Ads) Up to 540 days
Essential cookies Session or up to 12 months
Email communications Duration of relationship + 1 year
Server logs 90 days
Cookie consent records 3 years (audit requirement)

16. Data Security

IncomeFlow implements comprehensive security measures to protect personal data from unauthorized access, alteration, and disclosure. These measures include:

  • 256-bit AES encryption for data in transit and at rest
  • Two-factor authentication for account access
  • Regular security audits and penetration testing
  • Secure servers with redundant backups
  • Restricted access to personal data on a need-to-know basis
  • Incident response procedures and breach notification protocols

While we maintain strong security standards, no transmission of data over the internet is 100% secure. You use our services at your own risk, and we are not liable for unauthorized access due to factors beyond our reasonable control.

17. Contact Information

For questions about this Privacy Policy, to exercise your rights, or to report a data breach:

IncomeFlow Inc.
Data Protection Officer
155 West 19th Street
New York, NY 10011
United States

Email: [email protected]
Phone: +1 (212) 555-0100

We will respond to all inquiries within 30 days of receipt.

18. Policy Updates and Changes

IncomeFlow may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any material changes will be communicated to you:

  • Via a prominent notice on the website homepage (minimum 14 days before taking effect)
  • Through email notification if you have provided your email address
  • By requiring explicit re-consent where legally required

Your continued use of IncomeFlow following the posting of revised terms means you accept and agree to the changes. If you do not agree to the changes, please discontinue use of the website.

Last Updated: January 15, 2026
Effective Date: January 15, 2026
Total Document Length: 1,650 words