Privacy Policy

Last updated: June 2026

1. Who we are

Flowchat ("we", "us", "our") operates the automation platform at flowchat.now. We are the data controller for personal data collected through the Service. For data-related enquiries, contact us at contact@flowchat.now

2. Data we collect

Account data

Email address, name, and profile information provided during signup or via Google OAuth.

OAuth credentials

Access tokens and refresh tokens for connected apps (Google, Slack) required to run your automations. These are encrypted at rest and never shared with third parties beyond what is necessary to execute your workflows.

Automation data

Workflow configurations, conversation history with the AI assistant, and execution logs (timestamps, success/failure status).

Billing data

Subscription status and plan information. Payment details are processed and stored by Stripe — we do not store card numbers or payment details.

Usage data

Automation run counts, last active timestamps, and feature usage for service improvement.

3. How we use your data

To provide, operate, and maintain the Service
To authenticate you and manage your account
To execute your automations on your behalf
To process payments and manage subscriptions
To send transactional emails (account confirmations, automation failure notifications)
To improve the Service and fix technical issues
To comply with legal obligations

Our lawful basis for processing under GDPR is contract performance — we process your data to deliver the Service you signed up for.

4. Third-party processors

We use the following third-party services to operate Flowchat. Each acts as a data processor under our instruction:

SupabaseDatabase and authentication · Privacy policy

StripePayment processing and billing · Privacy policy

GoogleOAuth authentication and Gmail/Sheets integration · Privacy policy

SlackSlack integration for automations · Privacy policy

AnthropicAI language model for interpreting automation requests · Privacy policy

DigitalOceanCloud infrastructure for workflow execution · Privacy policy

RailwayBackend application hosting · Privacy policy

VercelFrontend application hosting · Privacy policy

5. Data retention

Account data is retained while your account is active
Automation data and conversation history is retained for the lifetime of your account
Execution logs are retained for 90 days
After account deletion, all personal data is permanently deleted within 30 days
Billing records may be retained for up to 7 years for legal and tax compliance

6. Your rights (GDPR)

If you are in the EU or UK, you have the following rights:

Access — request a copy of your personal data
Rectification — correct inaccurate data
Erasure — request deletion of your data
Portability — receive your data in a machine-readable format
Objection — object to processing of your data
Restriction — request we limit processing of your data

To exercise any of these rights, email contact@flowchat.now. We will respond within 30 days.

7. Data security

We implement appropriate technical and organisational measures to protect your personal data including encryption at rest and in transit, access controls, and regular security reviews. OAuth tokens are encrypted and access is restricted to the minimum necessary to run your automations. In the event of a data breach affecting your personal data, we will notify you within 72 hours as required by GDPR.

8. Cookies

We use only essential cookies required for authentication and session management. We do not use tracking or advertising cookies. No cookie consent is required for essential cookies under GDPR.

9. Children

The Service is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email. The date at the top of this page shows when it was last updated.

11. Contact

For privacy-related enquiries or to exercise your rights, contact us at contact@flowchat.now

← Back to Flowchat Terms of Service Contact