Effective date: 14 July 2026
Who handles the data
HostWorkflow is operated personally by Firas Sghairi from Tunisia. Privacy and data requests can be sent to support@hostworkflow.com.
What is collected
- Your email address, consent time, and email subscription status when you request the free kit.
- First-touch campaign values such as source, medium, campaign, content, and Pin ID.
- First-party funnel events such as page view, form start, accepted lead, kit access, checkout start, purchase, refund, and buyer exclusion.
- Order, checkout, and customer identifiers supplied by the payment provider. HostWorkflow does not collect or store payment-card details.
- Support messages and the details you choose to provide when asking for help.
Why it is used
The information is used to deliver the requested kit, send the disclosed four-email prospect sequence, complete and support a digital-product purchase, stop remaining prospect messages after purchase, handle refunds, prevent abuse, and reconcile which acquisition source led to a result.
Service providers
- Vercel hosts the website and server functions.
- Neon hosts the production Postgres database used for first-party funnel and order reconciliation.
- Kit stores email subscribers, sends the requested kit and prospect emails, and manages unsubscribe and suppression status.
- Polar provides HostWorkflow's checkout, payment processing, tax handling, order records, receipts or invoices, customer-portal access, and private digital delivery as Merchant of Record.
Cookies and identifiers
HostWorkflow uses first-party, HTTP-only identifiers to connect a visit, signup, checkout, and provider-confirmed order without placing your email address in analytics events or URLs. No GA4, Meta Pixel, TikTok Pixel, Hotjar, Pinterest Tag, or other third-party marketing tracker is enabled.
Retention and security
First-party funnel events are configured for a 395-day operational retention window. Short-lived rate-limit records are configured for two days. Subscriber and order records are retained as needed to provide the service, resolve access or refund issues, meet provider and legal obligations, and handle rights requests. Production secrets are stored in provider secret systems; the application stores a keyed hash rather than a plain email address in its internal contact table.
Your choices and requests
You can unsubscribe from marketing emails using the link in each message. You may request access, correction, deletion, or restriction of information HostWorkflow controls through the verified privacy contact shown above. Some order or transaction records may need to be retained where the payment provider or applicable law requires it.
International processing
The services above may process information in countries other than your own under their published data-protection terms. Review those providers’ privacy notices for details about their processing locations and safeguards.