Flowra

    Privacy Policy

    Last updated: March 1, 2026

    1. Information We Collect

    Personal Information: When you create an account, we collect your name, email address, company name, job title, and billing information. If you contact us, we collect any information you provide in your message.

    Usage Data: We automatically collect information about how you interact with Flowra, including pages visited, features used, content created, browser type, device information, IP address, and referring URLs.

    Google Search Console Data: When you connect your Google account via OAuth, we access Search Console data (such as queries, impressions, clicks, and page-level performance metrics) for the properties you authorize. This data is retrieved on your behalf using the scopes you approve in the Google consent screen and is displayed only inside your private Flowra workspace.

    Cookies & Similar Technologies: We use cookies, local storage, and similar technologies to maintain your session, remember preferences, and gather analytics. See Section 7 for details.

    2. How We Use Your Information

    We use the information we collect to:

    • Provide, maintain, and improve Flowra's services
    • Process transactions and manage your subscription
    • Send transactional emails (account confirmations, billing receipts, security alerts)
    • Analyze usage patterns to improve our product and user experience
    • Detect, prevent, and address fraud, abuse, or technical issues
    • Comply with legal obligations

    3. Data Sharing & Third Parties

    We do not sell, rent, or trade your personal information. We may share data with:

    • Service Providers: Hosting, payment processing, email delivery, and analytics providers who process data on our behalf under strict data protection agreements.
    • Legal Requirements: When required by law, regulation, legal process, or governmental request.
    • Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.
    • With Your Consent: We may share information when you explicitly authorize us to do so.

    Flowra accesses Google Search Console data via OAuth solely to display analytics inside the user's own private workspace. This data is not shared with third parties and is used in compliance with the Google API Services User Data Policy, including the Limited Use requirements.

    4. Data Storage & Security

    We implement industry-standard security measures to protect your data, including:

    • Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
    • Regular security audits and penetration testing
    • Role-based access controls and least-privilege principles
    • Automated monitoring and alerting for suspicious activity
    • SOC 2 Type II compliance (in progress)

    Your data is stored on secure servers within the United States and European Union. While no method of transmission or storage is 100% secure, we strive to use commercially acceptable means to protect your personal information.

    5. Data Retention

    We retain your personal information for as long as your account is active or as needed to provide services. After account deletion, we retain certain data for up to 90 days for backup and recovery purposes, and may retain anonymized, aggregated data indefinitely for analytics. Billing records are retained as required by applicable tax and accounting regulations.

    6. Your Rights

    Depending on your jurisdiction, you may have the following rights:

    • Access: Request a copy of the personal data we hold about you.
    • Correction: Request correction of inaccurate or incomplete data.
    • Deletion: Request deletion of your personal data, subject to legal retention requirements.
    • Portability: Request your data in a structured, machine-readable format.
    • Restriction: Request that we limit the processing of your data in certain circumstances.

    To exercise any of these rights, contact us at legal@useflowra.com. We will respond within 30 days.

    7. Cookies & Tracking

    We use the following types of cookies:

    • Essential Cookies: Required for platform functionality (authentication, security, preferences).
    • Analytics Cookies: Help us understand usage patterns and improve our service (e.g., Google Analytics).
    • Marketing Cookies: Used to deliver relevant advertisements and measure campaign effectiveness (only with consent).

    You can manage cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality.

    8. International Data Transfers

    If you access Flowra from outside the United States, your data may be transferred to and processed in the United States or other countries. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data in compliance with applicable data protection laws including GDPR.

    9. Children's Privacy

    Flowra is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete it promptly. If you believe a child has provided us with personal data, please contact us at legal@useflowra.com.

    11. Changes to This Policy

    We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice via email or in-app notification. Your continued use of Flowra after changes constitutes acceptance of the updated policy.

    12. Contact

    For privacy-related inquiries, data requests, or concerns, please contact us at:

    Flowra, Inc.
    Email: legal@useflowra.com