Privacy Policy — FlowCreatorAI

Last updated: April 2026

1. Overview

This Privacy Policy explains how FlowCreatorAI ("we", "us") collects, uses, and protects personal data when you use our service.

2. Information We Collect

We may collect the following information:

• Email address (for authentication and subscriptions)
• User inputs, preferences, and generated content
• Usage history (where applicable)
• Basic technical data required for security, abuse prevention, and service operation

Payments, invoicing, and tax handling are managed by Lemon Squeezy (Merchant of Record). FlowCreatorAI does not have access to full payment card details and does not store sensitive payment information.

3. Legal Basis for Processing (GDPR)

We process personal data based on:

• Performance of a contract
• Legitimate interests (service security, improvement, and abuse prevention)
• User consent, where applicable

4. How We Use Personal Data

We use personal data to:

• Provide and operate FlowCreatorAI
• Authenticate users and manage access
• Enforce usage limits and prevent abuse
• Improve service performance and reliability
• Communicate essential service-related messages

5. Cookies and Local Storage

We use cookies and similar technologies strictly necessary for authentication, session management, and core functionality.

We do not use advertising or tracking cookies.

6. Data Retention

We retain personal data only for as long as necessary to operate the service, comply with legal obligations, and enforce our Terms.

You may request deletion of your account-related data by contacting us.

7. Data Sharing

We do not sell personal data.

We share limited data with the following trusted service providers:

• Lemon Squeezy — payment processing, invoicing, and tax handling (Merchant of Record)
• Resend — transactional email delivery (magic link sign-in emails)
• OpenAI — AI content generation (your topic, niche, and tone inputs are sent to OpenAI's API to produce outputs)
• Cloudflare — bot and abuse protection via Turnstile (processes request metadata)
• Replit — infrastructure hosting and database storage

Each provider operates under their own privacy policy and data processing terms.

8. International Data Transfers

Personal data may be processed in countries outside your country of residence, including the United States, where several of our service providers are based. Where required by applicable law (including GDPR), transfers are safeguarded by Standard Contractual Clauses (SCCs) or equivalent mechanisms as established by each provider.

9. Data Security

We apply reasonable technical and organizational measures to protect personal data. However, no system is completely secure, and absolute security cannot be guaranteed.

10. Your Rights

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing

Requests can be submitted via email.

11. Children's Privacy

FlowCreatorAI is not intended for individuals under the age of 16, and we do not knowingly collect personal data from children.

12. Updates to This Policy

We may update this Privacy Policy from time to time. The updated date will always be shown at the top of this page.

13. Contact

Questions about your data? Email us at flowcreatorai@gmail.com

Back to app