Privacy Policy

Account information: your name, email address, and password (stored as a salted hash — we never see or store your plaintext password).

Workspace content: tasks, categories, and messages you create or connect through integrations, so we can display and organize them for you.

Billing information: if you upgrade to a paid plan, our payment processor (Polar) collects and stores your payment details directly — we never see or store your card number.

Analytics: only if you accept our cookie banner, we use Vercel Analytics to count page views and see which pages are useful. It's cookie-free and doesn't collect anything that identifies you individually. See our Cookie Policy for details.

Advertising: if you're on the free Starter plan and accept the "Advertising" cookie preference, we show ads served by Google AdSense, which may set its own cookies to select and measure ads. Never shown on Pro or Enterprise, and never loaded unless you opt in. See our Cookie Policy for details.

To operate the product: creating tasks, syncing your workspace, authenticating your account, and running the AI assistant on your behalf.

To send AI requests: when you use Chat or automatic task parsing, the relevant task titles and your message are sent to our AI provider to generate a response. This content is not used to train external models.

To process payments: subscription and billing details are handled by Polar under their own privacy policy.

To communicate with you: account, billing, and security notices (e.g. password reset links).

We don't sell your personal data, and we don't share your workspace content with other users or organizations outside your team.

We share data only with the service providers ("subprocessors") that help us run Flowshot, each bound by their own data-processing terms: Supabase (database hosting), Polar (payment processing), Groq (AI inference for Chat and task parsing), Vercel (hosting and, if you opt in, cookie-free analytics), and, if you're on Starter and opt in, Google AdSense (ad serving).

We may disclose information if required by law, or to protect the rights, safety, or property of Flowshot or our users.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing (for example under the GDPR if you are in the EU/EEA/UK, or the CCPA if you are a California resident).

You can exercise most of these rights directly from Settings, or by contacting us at the address below — we'll respond within the timeframe required by applicable law.

Your data is retained for as long as your account is active. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we're required to retain it (e.g. billing records for tax purposes).

An account that never verifies its email address is automatically deleted, along with its data, 7 days after signup.

Our service providers may process data outside your country of residence. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

Flowshot is not directed at children under 16, and we don't knowingly collect data from them.

We'll post any material changes here and update the date above; where required by law, we'll also notify you directly.

Questions about this policy, or want to exercise a data right? Reach us at info@flowshot.app.