Privacy Policy

1. Introduction

FlowStack, Inc. ("FlowStack", "we", "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at onflowstack.com.

2. Information We Collect

Account Information: Name, email address, password (hashed), organization name, and billing details.

Usage Data: Workflow execution logs, feature usage, performance metrics, and error reports.

Device & Browser Information: IP address, browser type, operating system, and device identifiers for security and analytics.

Payment Information: Processed securely by Dodo Payments. We do not store credit card numbers on our servers.

3. How We Use Your Information

We use your information to: provide and maintain the Service; process transactions; send transactional emails (receipts, alerts, security notifications); improve our product; comply with legal obligations; and prevent fraud.

4. Data Sharing

We do not sell your personal data. We may share data with: service providers who assist in operating the platform (hosting, payment processing, email delivery); law enforcement when required by law; and in connection with a merger or acquisition.

5. Data Security

We implement industry-standard security measures including encryption at rest (AES-256), encryption in transit (TLS 1.3), regular security audits, and SOC 2 Type II compliance. Enterprise plans include dedicated infrastructure isolation.

6. Data Retention

We retain your account data for the duration of your subscription. Execution logs are retained per your plan tier (Free: 1 day, Starter: 7 days, Pro: 30 days, Enterprise: 1 year). Upon account deletion, all data is permanently removed within 30 days.

7. Your Rights (GDPR & CCPA)

You have the right to: access your personal data; correct inaccurate data; delete your data; export your data in a portable format; object to processing; and withdraw consent. To exercise these rights, contact support@onflowstack.com.

8. International Transfers

Your data may be processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards (Standard Contractual Clauses) are in place for international data transfers.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email at least 30 days before they take effect.

Contact

For privacy-related inquiries, contact us at support@onflowstack.com.