Privacy Policy
Last updated: February 2026
HEALING G LIMITED (“we”, “us”, or “our”), operating as ContentFlow, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our service.
1. Information We Collect
We collect the following types of information:
Account Information
When you create an account, we collect your email address, name, and password. This information is necessary to provide you with access to our service.
Usage Data
We collect information about how you use the Service, including flows run, credits consumed, and content generation history. This helps us improve the service and provide support.
Technical Data
We automatically collect certain technical information including your IP address, browser type, device information, and access timestamps.
Payment Data
Payments are processed by an authorised third-party payment provider. We do not store full card details on our servers. We retain transaction records (amounts, dates, reference numbers) for billing and compliance purposes.
2. How We Use Your Information
We use your information to:
- Provide, maintain, and improve the Service
- Process transactions and send billing-related communications
- Send service updates and support messages
- Monitor usage patterns to improve platform performance
- Detect and prevent fraud or abuse
- Comply with legal obligations
3. Data Security
We implement industry-standard security measures to protect your data. All data is encrypted in transit using TLS and at rest. We use access controls to limit data access to authorized personnel only. We regularly review our security practices and update them as needed.
4. Third-Party Services
We use the following third-party services to operate our platform. Each has their own privacy policy:
- Authorised Payment Provider — Payment processing. Your payment information is handled directly by our payment provider under their privacy policy.
- OpenRouter — AI content generation. Content inputs are sent to AI models for processing.
- Convex — Database and backend infrastructure.
- Resend — Transactional emails (password resets, account verification).
5. Data Retention
We retain your account data for as long as your account is active. Transaction records are retained for compliance purposes for a minimum of 7 years. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law.
6. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your personal data
- Request a copy of your data in a portable format
- Withdraw consent for data processing where applicable
To exercise any of these rights, contact us at contact@content-flow.space.
7. Cookies
We use essential cookies to maintain your session and authenticate your account. We do not use third-party advertising or tracking cookies. Essential cookies are necessary for the Service to function and cannot be disabled.
8. International Data Transfers
HEALING G LIMITED is based in Hong Kong. Your data may be processed in countries other than your country of residence, including countries where our infrastructure providers operate. We ensure that appropriate safeguards are in place for any international data transfers.
9. Children's Privacy
Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we discover that we have collected data from a child under 18, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The “Last updated” date at the top of this policy indicates when it was last revised.
11. Contact
For privacy-related questions or concerns, please contact us:
- HEALING G LIMITED
- No. 5, 17/F Strand 50 50, Bonham Strand, Sheung Wan, Hong Kong
- Email: contact@content-flow.space