Privacy Policy for Flow Studiox

Flow Studiox (“we,” “our,” or “us”) values your privacy. This Privacy Policy explains what information we collect, how we use it, how we protect it, and what choices you have regarding your data when you use Flow Studiox and related services (the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Scope of this Policy

This policy applies to:

• Users of the Service
• Visitors to our website
• Anyone interacting with our app, browser extension, integrations, or support channels

This policy covers both:

• User data entered into the Service
• Connection, device, and network data generated when you use the Service

2. Information We Collect

A. Information You Provide Directly

This may include:

• Account information: name, email address, username, password, profile details
• User-generated content: prompts, messages, uploaded files, documents, text, images, code, or other content you submit
• Feedback and support requests: questions, bug reports, screenshots, customer support messages
• Communication preferences: opt-ins, notifications, and account settings

B. Information We Collect Automatically

When you use the Service, we may collect:

• IP address
• Device type, operating system, and browser version
• App version and installation identifiers
• Network connection information, including connection type
• Access times, session duration, feature usage, and logs
• Error reports and crash data
• Referrer URLs and analytics data
• Country/region and approximate geolocation, if available

C. Information from Third Parties

We may receive information about you from:

• Social login or authentication providers
• Analytics or support tools
• Customer support systems
• Business partners and affiliates
• Publicly available sources, when legally permitted

3. Connectivity and Network Usage

Because the Service may rely on internet connectivity, we may process and transmit data over the internet to provide features, authenticate access, sync content, and communicate with backend services.

This includes:

• Internet connectivity checks and connection status
• Transmission of app data to our servers or third-party infrastructure
• API calls to backend services for authentication, functionality, storage, and analytics
• Use of cloud services, CDN providers, and hosting providers
• Real-time or scheduled sync of user data across devices

We may record connection timestamps, request routing, server logs, IP addresses, and errors related to connectivity, timeouts, or failed requests.

4. Use of LLMs and AI Models

The Service may use large language models (“LLMs”) or AI-powered services to generate suggestions, responses, summarization, automation, analysis, classification, or transformations based on user input.

A. What Data We Send to LLM Providers

When you use AI-powered features, we may send the following to LLM providers or AI processing services:

• User prompts or messages
• Uploaded files or documents
• Text, images, code, or structured content you provide
• Context, instructions, app settings, or metadata needed to process the request
• Optional conversation history, if enabled
• Device or app metadata needed for secure operation and logs

B. Purpose of LLM Processing

We use LLM services to:

• Generate responses or suggestions
• Summarize and analyze documents
• Classify, extract, or transform content
• Support productivity, search, and workflow features
• Improve service quality and user experience

C. Data Usage by LLM Providers

LLM providers may process your submitted content to generate outputs. Depending on the provider’s terms and configuration, they may:

• Store prompts and outputs for security, abuse prevention, or operational needs
• Use data for monitoring, debugging, or service improvement, subject to contractual terms and law
• Retain logs for a limited period

We do not assume that any third-party LLM provider automatically uses your data to train public models; however, that depends on the provider, their configuration, and their contract. Where possible, we configure providers to minimize retention, disable training for customer data, and use business terms that restrict unauthorized use.

D. No Automatic Training Without Clear Notice

Unless we explicitly state otherwise in a feature-specific notice, we do not use your personal data or content to train our own or third-party public models without your consent. If a future model training feature is enabled, we will disclose it clearly and provide an opt-in or opt-out mechanism where required.

E. User Responsibility

You are responsible for not submitting:

• Sensitive personal information
• Confidential business secrets
• Protected health information
• Payment or identity data beyond what is necessary
• Any content that you do not have permission to share

If you do not want certain content processed by an AI feature, do not submit it to that feature or disable the relevant functionality.

5. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Authenticate users and manage accounts
• Enable AI features and generate outputs
• Store, sync, and retrieve user data
• Personalize content and functionality
• Monitor performance, reliability, and security
• Detect and prevent fraud, abuse, misuse, or unauthorized access
• Respond to support requests and customer inquiries
• Fulfill legal obligations
• Conduct internal analytics and product research
• Comply with applicable laws and regulations

6. How We Share Your Information

We may share information with:

• Service providers and vendors that help us operate the Service, such as hosting, analytics, infrastructure, support, authentication, email, and LLM processing providers
• Law enforcement, regulators, or other authorities when required by law or to protect rights, safety, or security
• Professional advisors, such as legal or financial advisors, under confidentiality obligations
• Successors or buyers in the event of a merger, acquisition, or sale of substantially all assets, subject to confidentiality obligations

We do not sell personal information in exchange for money. However, some data-sharing arrangements may constitute data transfer or data processing under applicable law, and we will disclose those practices in this policy and applicable notices.

7. Cookies and Tracking Technologies

We may use cookies, local storage, SDKs, pixels, and similar technologies to:

• Keep you logged in
• Remember preferences
• Measure usage
• Improve performance
• Support analytics and marketing campaigns

You can control cookies through your browser or device settings. Some features may not work properly if cookies are disabled.

8. Data Retention

We retain information only as long as necessary to:

• Provide the Service
• Comply with legal obligations
• Resolve disputes
• Enforce agreements
• Maintain security and fraud prevention records

When you delete your account or request deletion, we will remove or anonymize personal data in accordance with applicable law, except where retention is required for legal, security, or operational reasons.

For AI-generated content:

• Prompt and output data may be retained temporarily for service operation, abuse prevention, audit logs, and quality assurance.
• We may delete older records according to retention schedules.
• If your account is deleted, related prompt history and generated outputs may be removed unless legal retention obligations apply.

9. Data Security

We use reasonable administrative, technical, and organizational safeguards to protect your data from unauthorized access, disclosure, and misuse. These include:

• Encryption in transit and at rest where appropriate
• Access controls and role-based permissions
• Security monitoring and logging
• Vulnerability management and incident response processes

No system is completely secure, and we cannot guarantee absolute security. If a security incident affecting personal data occurs, we will notify affected users and regulators when required by law.

10. Your Rights and Choices

Depending on your jurisdiction, you may have rights including:

• Access to your data
• Correction of inaccurate data
• Deletion of your data
• Restriction or objection to processing
• Data portability
• Withdrawal of consent
• Right to opt out of marketing communications

To exercise these rights, contact us at hello@flowstudiox.com. We may ask you to verify your identity before fulfilling requests.

If you do not want the Service to process certain information, you may:

• Disable account features
• Remove or delete uploaded content
• Revoke consent for optional data processing
• Disable AI features if offered
• Adjust device or browser privacy settings

11. Children’s Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children without valid parental consent or as permitted by law. If we learn that we have collected personal information from a child without proper authorization, we will take steps to delete it promptly.

12. International Data Transfers

Your information may be transferred to and processed in countries outside your own, including where data protection laws may differ. We will take appropriate measures to protect data during international transfer, including:

• Standard contractual clauses
• Vendor contracts with security obligations
• Privacy safeguards according to applicable law

13. Third-Party Services

The Service may use third-party tools for:

• Hosting and infrastructure
• Analytics
• Authentication
• Email delivery
• Payment processing
• AI/LLM processing
• Customer support

These providers may receive data as necessary to perform their services. We require them to process personal data only on our instructions and in compliance with applicable privacy obligations.

14. Public, Shared, or User-Generated Content

If you publish, share, or submit content that is visible to others, it may be accessed by other users or third parties, depending on the settings you choose. We are not responsible for how others use or disclose information shared in public or shared spaces.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by:

• Posting the updated policy in the app or on our website
• Sending email notification when required
• Showing a prominent notice in the Service

Your continued use of the Service after changes become effective means you accept the updated policy.

16. Contact Information

If you have questions, concerns, or requests about this Privacy Policy or your data, contact us at:

Flow Studiox
hello@flowstudiox.com
https://flowstudiox.com

17. Legal Notice

This Privacy Policy is intended to provide a clear summary of how we handle personal data. It does not replace contractual terms or legal requirements specific to your jurisdiction. If there is a conflict, applicable law or the contract governing your use of the Service will control.