RME Flow Privacy Notice
Version 2026-10-13-beta-v1 · Effective October 13, 2026
Rosa M. Espinal, LLC (“RME”) operates the RME Flow beta. This notice covers the application and its invitation, account, support, and security processes. A separate notice may apply to other RME services and the corporate website. Questions or requests: support@rosaespinal.com, or Rosa M. Espinal, LLC, 1317 Edgewater Dr #7865, Orlando, FL 32804.
What we collect
We receive your invited email address, name, account and authentication information, invitation and agreement records, support messages, and the relationships, projects, ideas, actions, notes, interaction history, templates, and estimated values you choose to enter. Authentication stores password credentials in protected form and uses session cookies to keep you signed in. Our hosting and email providers may process operational data such as connection details, service logs, and delivery status needed to operate and secure the service. The beta does not request card details.
How we use it
We use information to create and secure your account, deliver the workspace and its export, send requested password reset and essential service messages, answer support requests, detect misuse, maintain backups, and meet legal obligations. We do not use workspace content for advertising or to train an AI model. We do not send marketing emails from beta signup; any later marketing choice will be separate.
Who can see it
Your solo workspace is available through your account. RME’s platform support screen shows account-level information and workspace presence, not the contents of customer workspaces. Authorized operators may need limited technical access to investigate a requested support issue, maintain the service, or address a security or legal problem. We do not sell workspace records. We may disclose information when required by law or necessary to protect the service and users.
Service providers
Railway hosts the application and PostgreSQL database, including scheduled database backups and a point-in-time recovery archive. Resend delivers transactional messages such as password reset email. GitHub stores the application code and development workflow, not customer workspace records as part of normal operation. Each provider handles information needed for its function under its own service terms. We may replace a provider and will update this notice if the change materially affects how information is handled.
Retention, export, and deletion
While your beta is active, your records stay in the workspace unless you use the available archive or recoverable delete controls. Archive and Trash are not permanent deletion. After seven months of beta access, editing stops and you can view and export for 60 days. The workspace then locks. We retain locked workspace records for a further 90 days to handle support and recovery; we schedule deletion from the active database within the following 30 days, unless a legal, security, or dispute reason requires longer retention. Account and acceptance records are deleted with an eligible account unless a documented legal, security, or dispute reason requires retaining particular information longer.
You may request earlier account or workspace deletion at support@rosaespinal.com. We verify that you own the account before acting and aim to complete an eligible request within 30 days. Copies in scheduled daily and weekly volume backups may remain for up to six and 27 days respectively. The separate point-in-time recovery archive retains approximately four weeks of database history. We will remove any separately retained manual snapshot or restored database service containing deleted records within 30 days of completing deletion, unless a documented legal or security hold applies. We do not restore deleted records from a backup into a live account except when needed for recovery with appropriate safeguards.
Security and your choices
We use account authentication, workspace access checks, and operational backups. No online service can guarantee absolute security. Please keep your password private and avoid entering payment card numbers, Social Security numbers, medical records, or other highly sensitive regulated data. You can change your name and password in your account and export your workspace while access is available. Contact us to request access, correction, or deletion, or report a security concern. We will respond under applicable law.
Changes
We will post material changes with an updated version and effective date, and provide direct notice or seek new agreement where required. Contact hello@rosaespinal.com for general company privacy inquiries.