Privacy Policy

Last updated: June 2026.

Capital Flow ("we," "us," "our") delivers distilled water across Ottawa and Gatineau. This Privacy Policy explains, in plain language, what personal information we collect when you use our website, customer portal, and mobile app, how we use it, and who we share it with.

Information we collect. Account information you give us: your name, email address, phone number, preferred language, and a password (which we store only as an encrypted hash — never in plain text). Delivery details: the addresses where you want water delivered and any delivery notes you add. Order history: the products you order, your delivery dates, invoices, and payment status.

Payment information. We accept card payments through Stripe, our payment processor. Your full card number is entered directly with Stripe and is never seen or stored on our servers — we only keep a secure Stripe reference along with the amount, date, and status of each payment.

How we use your information. We use it to schedule and complete your water deliveries; to process payments and issue invoices and receipts; to provide customer support and respond to your requests; and to send you service messages such as order confirmations, delivery reminders, and account emails. We use your information to run our delivery and billing service — we do not sell it.

Service providers we work with. We share only the information each provider needs to do its job: Stripe processes card payments; QuickBooks Online (Intuit) stores our invoices and accounting records; and Resend sends our transactional emails (confirmations, receipts, and reminders). These providers handle your data on our behalf and are not permitted to use it for their own purposes.

Data security and retention. Connections to our services are encrypted, passwords are hashed, and card credentials are handled entirely by Stripe. We keep your account and order records for as long as your account is active and as required for tax and accounting purposes, after which we delete or anonymize them.

Your choices. You can view and update your account details and delivery addresses at any time from your customer portal. To request a copy of your data, or to have your account and personal information deleted, contact us at yan@capitalflow.ca.

Children's privacy. Our service is intended for businesses and adults; we do not knowingly collect information from children.

Changes to this policy. We may update this policy from time to time; the "last updated" date above shows when it last changed.