Privacy Policy

Account Information

When you create an account, we collect your email address, full name, and password (stored securely using bcrypt encryption). If you sign up using OAuth providers, we receive basic profile information from those services.

Business Profile

As a freelancer, you may provide your business name, custom subdomain, logo, brand colors, and business address for invoicing purposes.

Client Information

When you add clients to your portal, you provide their name, email, company name, phone number, and address. This data is stored to facilitate your client relationships.

Files and Content

Files you upload (documents, images, deliverables) are stored securely. We collect file metadata including name, size, type, and upload date.

Messages

Messages exchanged between you and your clients through FlowVid are stored to maintain conversation history.

Billing Information

Payment processing is handled by our third-party providers. We store subscription status and transaction references, but not your full payment card details.

Technical Data

We automatically collect IP addresses, browser type (user agent), and session information for security and service improvement purposes.

We use your information to:

• Provide and maintain the FlowVid service
• Process your subscription and billing
• Enable communication between you and your clients
• Store and deliver files through your client portal
• Send transactional emails (password resets, invoice notifications, etc.)
• Protect against fraud and unauthorized access
• Improve our services and develop new features
• Respond to your support requests

FlowVid integrates with trusted third-party services to provide functionality:

Payment Processing

We use LemonSqueezy for subscription billing and Stripe for invoice payments. These services have their own privacy policies governing payment data.

Email Services

We use Brevo (formerly Sendinblue) to send transactional emails. Your email address is shared with Brevo for this purpose.

File Storage

Files are stored using Amazon Web Services (AWS) S3. Files are encrypted and access is controlled through secure, time-limited URLs.

Database Hosting

Our database is hosted on Neon, a managed PostgreSQL service with enterprise-grade security.

We do not sell your personal information. We share data only in these circumstances:

• With service providers who help us operate FlowVid (as described above)
• When required by law or to respond to legal process
• To protect the rights, property, or safety of FlowVid, our users, or others
• With your consent or at your direction

When you share files or information with your clients through FlowVid, that data becomes visible to those clients through your branded portal.

We retain your data for as long as your account is active or as needed to provide services. Specifically:

• Account data is retained while your account exists
• Files are retained until you delete them or close your account
• Messages are retained as part of your client communication history
• Session data expires automatically (typically within 7-30 days)
• Billing records are retained as required for tax and legal compliance

When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request a machine-readable copy of your data
• Objection: Object to certain processing of your data
• Withdrawal: Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@flowvid.dev. We will respond within 30 days.

We implement appropriate technical and organizational measures to protect your data:

• Passwords are hashed using bcrypt with secure salting
• Data is encrypted in transit using TLS/SSL
• Files are stored with encryption at rest
• Access to systems is restricted and monitored
• Session tokens expire automatically
• We regularly review and update our security practices

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

FlowVid uses essential cookies for:

• Authentication (keeping you logged in)
• Session management
• Security (preventing cross-site request forgery)

We do not use advertising cookies or third-party tracking for marketing purposes. We may use basic analytics to understand service usage and improve FlowVid.

FlowVid is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

FlowVid operates globally. Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses where applicable.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on our website. Your continued use of FlowVid after changes take effect constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@flowvid.dev
• Website: flowvid.dev