Flowra ("we", "our", or "us") operates a distributed systems design and simulation platform. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our platform at flowra.dev. Please read this policy carefully.
1. Information We Collect
We collect information you provide directly when you create an account, use our services, or contact us:
- Account data: Name, email address, and password (hashed, never stored in plaintext)
- Usage data: Architecture diagrams, simulation configurations, and project data you create within the platform
- Device data: Browser type, IP address, operating system, and referring URLs collected automatically via server logs
- Communications: Any messages you send to our support team
We do not collect payment information directly - if we introduce paid plans, payments are processed by a third-party provider (e.g., Stripe) and governed by their privacy policy.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Flowra platform
- Create and manage your account
- Send transactional emails (account confirmation, password reset)
- Analyze usage patterns to improve platform performance and features
- Detect, investigate, and prevent fraudulent or unauthorized activity
- Comply with legal obligations
We do not sell your personal data. We do not use your architecture data for any purpose other than providing the service to you.
3. Data Sharing and Disclosure
We share your information only in the following limited circumstances:
- Service providers: We use trusted third-party vendors (hosting, email delivery, analytics) who process data on our behalf under data processing agreements
- Legal requirements: We may disclose information if required by law, court order, or government authority
- Business transfer: If Flowra is acquired or merges, your data may be transferred as part of that transaction
- With your consent: We share data in other circumstances only with your explicit consent
4. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or legitimate business interest (e.g., fraud prevention records).
Anonymized and aggregated usage data (with no link to your identity) may be retained indefinitely for platform improvement purposes.
5. Security
We implement industry-standard security measures to protect your data:
- Passwords are hashed using bcrypt with appropriate work factors
- Data in transit is encrypted via TLS 1.2+
- Access to production systems is restricted to authorized personnel
- JWT tokens are short-lived and refreshed regularly
No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we work to maintain appropriate safeguards.
6. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the data we hold about you
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your account and associated data
- Portability: Request export of your data in a machine-readable format
- Objection: Object to processing of your data for direct marketing
To exercise these rights, contact us at privacy@flowra.dev. We will respond within 30 days.
7. Cookies and Tracking
Flowra uses minimal cookies necessary for platform operation:
- Session cookies: Maintain your logged-in state (cleared on browser close)
- Preference cookies: Remember UI preferences (e.g., theme)
We do not use advertising cookies or cross-site tracking. We may use anonymous analytics (e.g., page view counts) without identifying individual users.
8. Changes to This Policy
We may update this Privacy Policy periodically. When we make material changes, we will notify you by email or by displaying a prominent notice within the platform at least 14 days before the changes take effect. Your continued use of Flowra after the effective date constitutes acceptance of the updated policy.
9. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at:
- Email: privacy@flowra.dev
- General: hello@flowra.dev