Privacy Policy — Flexora

1. Who we are

Flexora (“we”, “us”, “our”) operates getflexora.ca and related subpages. We provide a payment-page platform that allows aesthetic clinics and health & wellness businesses to offer monthly payment plans to their clients via Klarna, powered by Stripe.

For questions about this policy, contact us at hello@getflexora.ca.

2. Information we collect

From visitors to the Flexora website

Name, clinic name, email address, and business type — when you submit the “Get started” contact form.
Browsing data — pages visited, time on site, device type — collected automatically via the Meta Pixel and standard server logs.

From clinic booking pages (e.g. flexora-navy.vercel.app/[clinic-slug])

We do not directly collect payment information. All payments are processed by Stripe and its BNPL partners (Klarna).
We may receive confirmation of a completed transaction from Stripe (e.g. a booking event) to update our records.

3. How we use your information

To respond to your inquiry and set up your clinic account.
To send transactional emails related to your account (no marketing without consent).
To measure the effectiveness of our advertising on Facebook and Instagram via the Meta Pixel.
To improve our platform and diagnose technical issues.

4. Cookies & tracking

We use the Meta Pixel (a JavaScript tracking cookie) to measure ad performance and build relevant advertising audiences on Facebook and Instagram. This pixel records standard events such as page views and button clicks. You can opt out of interest-based advertising at youronlinechoices.com or via your Facebook ad preferences.

We do not use tracking cookies for any purpose other than advertising measurement.

5. Third-party services

Stripe — processes all payments. Subject to Stripe's Privacy Policy.
Klarna — Buy Now Pay Later providers. Their own privacy policies apply to any financing application.
Supabase — our database provider, hosted in the US. Data is encrypted at rest and in transit.
Vercel — our hosting provider. Standard server access logs may be retained for up to 30 days.
Meta (Facebook/Instagram) — advertising platform. Meta's data practices are governed by their Privacy Policy.

6. Data retention

We retain contact form submissions for up to 24 months or until you request deletion. You may request deletion of your data at any time by emailing hello@getflexora.ca.

7. Your rights

Depending on your jurisdiction (including Quebec's Law 25 / Bill 64 and GDPR), you may have the right to access, correct, or delete your personal data, and to withdraw consent for marketing communications. To exercise any of these rights, contact us at hello@getflexora.ca.

8. Changes to this policy

We may update this policy from time to time. Material changes will be announced on this page with an updated date. Continued use of the platform after changes constitutes acceptance.