1. Who We Are

FlowCamp ("we", "us", "our") is a visual campaign planning tool operated by FlowCamp. If you have questions about this policy, contact us at hello@flowcamp.app.

2. Information We Collect

Information you provide

• Account data — your name, email address, and password (stored as a bcrypt hash)
• Profile preferences — display name, avatar colour
• Content — projects, campaigns, cards, comments, checklists, and any file attachments you upload
• Billing data — payment is handled entirely by Stripe. We store only your Stripe customer ID and subscription status — never raw card numbers

Information collected automatically

• Usage data — pages visited, features used, timestamps of actions
• Log data — IP address, browser type, referring URLs, error traces
• Cookies — a single session cookie used to keep you logged in (no third-party tracking cookies)

3. How We Use Your Information

• Provide, maintain, and improve the FlowCamp service
• Process payments and manage your subscription via Stripe
• Send transactional emails (password resets, billing receipts)
• Respond to support requests
• Monitor for abuse, security incidents, and errors
• Comply with legal obligations

We do not sell your personal data. We do not use your content to train AI models. We do not serve advertising.

4. Data Sharing

We share data only with the following categories of service providers, strictly to operate the service:

• Stripe — payment processing and subscription management
• Infrastructure providers — hosting, database, file storage (servers located in the EU)
• Error monitoring — anonymous crash reports to help us fix bugs

We will disclose your data if required by law or to protect the rights and safety of our users.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance (e.g. billing records for up to 7 years).

6. Security

We use industry-standard measures to protect your data: HTTPS encryption in transit, bcrypt password hashing, and access controls limiting who can reach production systems. No method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Export your data in a portable format
• Object to certain processing

To exercise any of these rights, email hello@flowcamp.app. We'll respond within 30 days.

8. Children's Privacy

FlowCamp is not directed at children under 16. We do not knowingly collect data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this policy from time to time. When we make material changes, we'll notify you by email or by displaying a notice in the app. Continued use of FlowCamp after changes take effect constitutes acceptance of the updated policy.

10. Contact

Questions or concerns? Email us at hello@flowcamp.app.