Privacy Policy

1. Who we are

Flowy.llink is an async video communication tool operated by Flowy Labs, Inc., a Delaware corporation with offices in Irvine, California. For any privacy questions, contact team@flowylabs.ai.

2. Information we collect

We collect only what we need to run the service, bill you, and support you.

Account data

Your email address, display name, and profile picture.

Content you create and share

The videos, voice notes, screen recordings, messages, transcripts, captions, files, and links you upload, post, or share through Flowy.llink, along with associated metadata (timestamps, playback markers, stream and conversation membership).

Payment data

Subscription payments are processed by Stripe. We do not store full payment card numbers. We retain billing metadata such as plan, subscription status, billing address (if provided), and the last four digits of the card used.

Usage and device data

Device type, operating system, app version, IP address, approximate location (from IP), log events, crash reports, and product interactions (what you clicked, played, or posted).

Support data

When you email us or submit feedback, we keep the contents of that correspondence.

3. How we use your information

We use the data above to:

• Provide, maintain, and improve Flowy.llink.
• Authenticate your account and keep it secure.
• Transcribe and caption your recordings.
• Bill your subscription and send billing notices.
• Send you service updates, security alerts, and (if you opt in) product news.
• Respond to support requests.
• Detect, investigate, and prevent abuse, fraud, and violations of our Terms.
• Comply with legal obligations.

We do not train artificial intelligence or machine-learning models on your content. Our AI subprocessors (for transcription and captioning) are contractually prohibited from training their models on your content.

4. Legal bases for processing (EU/UK users)

If you are in the EU, UK, or Switzerland, we process your personal data under one or more of these lawful bases:

• Contract — to provide the service you signed up for.
• Legitimate interests — to secure the service, prevent fraud, and improve the product.
• Consent — for optional marketing emails and analytics cookies you opt into.
• Legal obligation — to comply with tax, accounting, and law-enforcement requirements.

5. Subprocessors

We rely on trusted vendors to run Flowy.llink. Each is bound by a data-processing agreement that limits how they may use your data. Our current subprocessors are:

• Stripe — payment processing.
• Amazon Web Services, Google Cloud Platform, Cloudflare — hosting, storage, and content delivery (United States).
• Transcription and AI provider(s) — automated transcription and captioning.
• PostHog, Google Analytics, and/or Mixpanel — product and web analytics.
• Email delivery provider — transactional and, where you've opted in, marketing email.

This list is current as of the effective date at the top of this page. We'll update it when it changes; material changes will be announced in-product or by email.

6. How we share your information

We share personal data only in these situations:

• With subprocessors — as described above, under a written contract.
• With other users — content you post in a stream or huddle is visible to the other members of that stream or huddle.
• For legal reasons — to comply with a lawful subpoena, court order, or other legal process; to protect our rights, safety, or property; or to investigate fraud.
• In a business transfer — if Flowy Labs is acquired, merged, or sells substantially all of its assets, your data may transfer as part of that transaction. We'll notify you first.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

7. Data retention

We keep your account data for as long as your account is open. If you delete your account, we remove active account data within 30 days and purge it from routine backups within 90 days, except where we are required to retain it for legal, accounting, or fraud-prevention purposes. Videos, voice notes, and other content are deleted when you delete the parent stream or conversation.

8. Security

We use TLS for data in transit and encryption for data at rest, along with access controls, logging, and regular security reviews. No system is perfectly secure; we cannot guarantee absolute security, but we work hard to protect your data and will notify you promptly of any breach that affects you, as required by law.

9. Your rights

All users

You can access, update, or delete your account data at any time from within Flowy.llink or by emailing team@flowylabs.ai.

California residents (CCPA / CPRA)

You have the right to:

• Know what personal information we collect, use, and disclose about you.
• Request deletion of your personal information.
• Request correction of inaccurate personal information.
• Limit the use of sensitive personal information.
• Opt out of "sale" or "sharing" of personal information — we do not sell or share personal information for cross-context behavioral advertising.
• Be free from discrimination for exercising any of these rights.

To exercise any of these rights, email team@flowylabs.ai. You may designate an authorized agent to submit requests on your behalf; we will verify the agent's authority before responding.

EU, UK, and Swiss residents (GDPR / UK GDPR)

You have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data, and to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your local data protection authority.

Your data is processed in the United States. We rely on the Standard Contractual Clauses approved by the European Commission (and the UK International Data Transfer Addendum, where applicable) for international transfers.

10. Cookies and tracking

We use a small number of cookies and similar technologies:

• Essential cookies — required to keep you signed in and the service functioning.
• Analytics cookies — help us understand how the product is used. You can decline these.

We do not use advertising cookies and do not allow third-party advertising networks on our website or in the app. We honor Global Privacy Control ("GPC") signals as an opt-out of analytics tracking.

11. Children

Flowy.llink is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal data, contact team@flowylabs.ai and we will delete it.

12. Recording and consent

Flowy.llink lets you record video, audio, and your screen. The laws that apply to recording conversations vary by state and country — some places require all parties to consent. You are responsible for obtaining the consent required by the laws applicable to you and the other participants before you record.

13. International users

Flowy Labs is based in the United States, and your data is stored and processed in the United States. If you are outside the U.S., please understand that you are transferring your data to the U.S. when you use Flowy.llink.

14. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll notify you by email or in-product at least 30 days before they take effect. Your continued use of Flowy.llink after the effective date constitutes acceptance of the updated policy.

15. How to contact us

For any privacy question, request, or complaint:

Flowy Labs, Inc.
Irvine, California, USA
team@flowylabs.ai