Privacy Policy

This Privacy Policy explains how FlowGuideAI, Inc. ("FlowGuideAI," "we," "us," or "our") collects, uses, discloses, and protects information about you when you use the FlowGuideAI platform, website, and related services (collectively, the "Service"). By accessing or using the Service, you agree to this Policy.

1. Data We Collect

Account Data

When you register, we collect your name, email address, organization name, and authentication credentials. If you sign in via OAuth (Google, GitHub), we receive your name, email, and profile image from the provider.

Usage Data

We collect information about how you interact with the Service, including pages viewed, features used, documents created, export actions, and error events. This data is used to operate, secure, and improve the Service.

Anonymized Usage Analytics

Document Content

Documents, templates, uploaded images, and other content you create or upload within the Service are stored on your behalf. Content you submit to AI generation features is processed by our AI providers to generate documentation (see Section 5). We do not use your document content to train AI models, and we do not share document content with third parties except as described in this Policy or as required by law.

Payment Data

Payment processing is handled by Stripe, Inc. FlowGuideAI does not store your credit card numbers or full payment details. We receive transaction identifiers, subscription status, and billing address from Stripe for account management purposes. Stripe's privacy policy governs the handling of your payment information.

Technical and Device Data

We automatically collect IP addresses, browser type and version, operating system, referring URLs, and timestamps. This information is used for security monitoring, abuse prevention, and operational diagnostics.

2. How We Use Your Data

• Service delivery: Authenticating your account, generating documents, managing your workspace, and providing customer support.
• Product improvement: Using anonymized analytics data to improve features, fix bugs, and develop new capabilities.
• Security and fraud prevention: Monitoring for unauthorized access, abuse, and violations of our Acceptable Use Policy.
• Communications: Sending transactional emails (account confirmations, invoices, security alerts). We do not send marketing emails without your consent.
• Legal compliance: Meeting our obligations under applicable laws and regulations, and enforcing our Terms of Service.

3. Data Storage and Infrastructure

FlowGuideAI is built on Cloudflare's global edge infrastructure. Data is stored using Cloudflare Workers, D1 (SQLite-based relational database), and R2 (object storage). All data is encrypted in transit using TLS 1.3 and encrypted at rest using AES-256. Infrastructure is US-based with Cloudflare's SOC 2 Type II certified data centers.

Enterprise customers may deploy FlowGuideAI in a tenant model where document content remains within their own data environment — contact sales@flowguideai.com for available deployment options.

4. AI Processing Disclosure

When you use AI document generation features, content you submit (text descriptions, uploaded images, template inputs) is sent to third-party AI model providers (which may include Anthropic, OpenAI, or Cloudflare AI, depending on your subscription tier) for processing. This processing is governed by those providers' data handling and privacy policies in addition to this Policy.

FlowGuideAI does not use your document content to fine-tune, train, or improve AI models operated by FlowGuideAI or third-party providers.

5. Data Sharing

We do not sell your data. We share data only in the following limited circumstances:

• Stripe: Payment processing. Governed by Stripe's privacy policy.
• AI model providers: Processing AI generation requests as described in Section 4.
• Cloudflare: Infrastructure provider. Cloudflare's privacy policy applies to infrastructure-level data.
• Legal requirements: In response to lawful legal process (subpoenas, court orders) or to protect the rights, property, or safety of FlowGuideAI, its users, or the public.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with notice provided to affected users.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Deletion: Request deletion of your account and associated personal data.
• Portability: Request an export of your data in a machine-readable format.
• Correction: Request correction of inaccurate personal data.
• Opt-out of analytics: Disable anonymized analytics collection in your account settings.
• GDPR (EEA residents): Rights of access, rectification, erasure, restriction, portability, and objection. To exercise these rights, contact legal@flowguideai.com.
• CCPA (California residents): Right to know, right to delete, right to opt out of sale (we do not sell data), and right to non-discrimination.

7. Data Retention

Account data and document content are retained while your account is active. Upon account deletion, personal data and document content are deleted within 30 days, except where retention is required by law or for fraud prevention purposes. Anonymized, aggregated analytics data may be retained indefinitely as it cannot be used to identify individuals.

8. Children's Privacy

The Service is not directed at persons under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, contact us at legal@flowguideai.com and we will delete it promptly.

9. Changes to This Policy

We may update this Policy periodically. When we make material changes, we will update the effective date at the top of this page and notify users by email or in-app notice. Continued use of the Service after the effective date constitutes acceptance of the updated Policy.

10. Contact

For privacy questions, requests, or concerns: legal@flowguideai.com