Privacy Policy

We collect information you provide directly to us when you create an account, submit a contact form, or communicate with our team. This includes: name, email address, company name, and any workflow or integration data you create within the platform. We also automatically collect certain technical data when you use Flow, including IP addresses, browser type and version, pages visited, time spent on pages, and referring URLs. This data is used solely to improve platform performance and security.

We use collected information to: - Provide, operate, and maintain the Flow platform - Communicate with you about your account, flows, and execution logs - Send product updates and announcements (you may opt out at any time) - Diagnose technical issues and improve platform reliability - Comply with legal obligations We do not sell, rent, or trade your personal information to third parties under any circumstances.

Workflow execution data is retained for 90 days on Professional plans and 7 days on the Starter plan by default. Enterprise customers may configure custom retention periods. Your personal account data is retained for as long as your account is active. Upon account deletion, we permanently remove your data within 30 days, except where retention is required by law. All data is stored on servers located within ISO 27001 certified infrastructure. We employ AES-256 encryption at rest and TLS 1.3 in transit.

Flow connects to third-party services (Shopify, Zoho, OpenAI, etc.) using OAuth 2.0 or API keys that you explicitly provide. We store only the minimum token scope necessary to execute your configured flows. We never access third-party accounts for any purpose other than executing the specific flows you create. You may revoke any integration's access at any time from your App Directory settings.

Depending on your jurisdiction, you may have the right to: - Access the personal data we hold about you - Request correction of inaccurate data - Request deletion of your data (Right to be Forgotten) - Object to or restrict certain processing activities - Export your data in a machine-readable format To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Flow uses cookies strictly necessary for authentication and session management. We do not use tracking cookies, behavioural advertising cookies, or fingerprinting technologies. You may configure your browser to block all cookies, but this may affect your ability to log in to the platform.

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email at least 14 days before they take effect. Continued use of Flow after changes become effective constitutes your acceptance of the revised policy.

For any privacy-related queries or to exercise your data rights, contact us at: Email: [email protected] Address: Flow Inc., India