Privacy Policy

1. What Data We Collect

From your account: name, email address, and password (managed by Supabase Auth — we never see your password in plain text).

From the contacts you upload: the data you photograph or enter about third parties — name, title, company, phone numbers, email addresses, website, address, social media profiles, and notes — along with the original image (if uploaded) and the AI-generated research report.

From payments: if you subscribe to a paid plan, Stripe processes your card data directly — Flow Card never stores card numbers.

2. How We Use Your Data

• To operate the app: authenticate you, save your analyses, and display your history.
• To generate the contact extraction and AI research you requested.
• To process your subscription and credits.
• To communicate with you about support or important changes to the app.

3. Who We Share Data With

We do not sell your data. We share it only with the providers that make the app work (subprocessors), each receiving only what is necessary for their specific function:

• Supabase — database, authentication, and image storage. Servers: United States.
• Stripe — payment processing and billing. Servers: United States.
• Anthropic (Claude) — AI model — contact data extraction and web research. Servers: United States.

All providers operate under data processing agreements and are subject to their own privacy policies.

4. Third-Party Data You Upload — Our Position

Flow Card acts as a data processor for the third-party data you upload. You are the data controller for that information.

This means that individuals whose data appears in your account may exercise their rights of access, correction, or deletion by contacting you directly, since you made the decision to collect that information.

If Flow Card receives a request directly from a third party regarding data that a user uploaded, we will notify the corresponding user so they can respond in their role as data controller.

5. How Long We Keep Your Data

For as long as your account exists. If you delete an analysis or your account, we will delete the associated data (including the image in Supabase Storage) within a maximum of 30 business days.

6. Your Rights

You may access, correct, or delete your data at any time from within the app (Settings, or by deleting a specific analysis), or by writing to us at info@flowtifyai.com if you need assistance, including deleting your account entirely.

7. Security and Breach Notification

Each account can only access its own data — data isolation is enforced at the database level, not only at the interface level. Direct public access to the database is blocked by default.

Breach notification: If we detect a security incident that compromises your personal data, we will notify you by email within a maximum of 72 hours of becoming aware of the incident, with information about the nature of the event and the measures taken.

8. Minors

Flow Card is not directed at minors. We do not knowingly collect data from individuals under the age of 18.

9. Changes to This Policy

If we make a significant change to how we handle your data, we will notify you by email or within the app before it takes effect.

10. Contact

Questions about your data? Reach us at info@flowtifyai.com. See also the Terms of Use.