Privacy Policy

1. Overview

This Privacy Policy explains what information flowsint.lol ("we", "us") collects when you use this website, your account area and the hosted Flowsint workbench, why we collect it, and the choices you have. The open-source Flowsint core you run yourself is not covered by this policy.

2. Information we collect

We keep the data we collect to the minimum needed to run the hosted service.

• Account data from Google sign-in: your name, email address, profile image URL and the Google account identifier.
• Subscription and billing data: your plan, billing interval, subscription status and identifiers issued by our payment processor. We never receive or store your full card number.
• Service usage data: credits consumed, flows executed and technical events needed to keep the service reliable.
• Technical data: IP address, browser and device type and timestamps, collected in server logs for security and abuse prevention.

3. Investigation data

Entities, relationships, notes and enrichment results that you add to a case belong to you. We store them to run the workbench for your account, we do not sell them, and we do not use them to train models.

You are responsible for the data you choose to ingest. Only collect information you are lawfully allowed to process, and respect the terms of the sources you query.

4. How we use your information

We use the information described above to create and secure your account, to provide and meter the service, to process subscription payments, to answer support requests, to detect abuse and fraud, and to comply with legal obligations.

5. Cookies and local storage

We use essential cookies and local storage to keep you signed in, to remember your preferences, and to protect forms against cross-site request forgery. You can clear them in your browser, but signing in depends on them.

6. Service providers

We share limited data with the providers that make the service work. Each provider processes data under its own terms and only for the purposes described here.

• Google - sign-in and account identity.
• Stripe - subscription billing, invoices and payment method handling.
• Cloud hosting and database providers - running this website and storing account records.

7. Retention

We keep account and billing records for as long as your account exists, and afterwards only as long as we need them for accounting, tax, dispute resolution and legal compliance. Server logs are kept for a short operational window and then deleted.

8. Security

We use encryption in transit, access controls and least-privilege practices to protect your data. No system is perfectly secure, so we cannot promise absolute security, but we limit what we store to reduce the impact of any incident.

9. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, to object to certain processing, and to lodge a complaint with a supervisory authority.

To exercise these rights, email support@flowsint.lol. We may need to verify that the request comes from the account owner.

10. International transfers

Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards such as standard contractual clauses.

11. Children

The service is not intended for children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Changes and contact

We may update this policy as the service evolves. Material changes are reflected by the "Last updated" date above.

Questions about privacy can be sent to support@flowsint.lol.