Privacy Policy

1. Introduction

Flowti ("we", "our", or "us") operates a link-in-bio platform for creators at flowti.co. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website and services.

By creating an account or using Flowti, you agree to the practices described in this policy. If you do not agree, please do not use our services.

2. Information We Collect

We collect the following types of information:

• Account data: Name, email address, username, and password (hashed) when you register.
• Profile data: Bio, profile photo, links, and any other content you add to your public profile.
• Usage data: Pages visited, clicks on your profile links, device type, browser, operating system, and referrer URL. We do not store your IP address: it is used in transit to derive an approximate country for your visit statistics, and as a short-lived key to rate-limit abuse of public forms.
• Payment information: Checkout takes place on a page hosted by Polar Software, Inc., which acts as merchant of record for Flowti subscriptions. Your card details are collected and stored by Polar and never reach our servers; we receive only your subscription status, plan and billing period.
• Cookies and tracking data: See our Cookie Policy for details.

3. How We Use Your Information

We use collected data to:

• Provide and improve our platform and features.
• Process payments and manage your subscription.
• Display analytics on your dashboard (link clicks, traffic sources, device breakdown).
• Send transactional emails (account confirmation, password reset, billing receipts).
• Send product updates and marketing emails — you may opt out at any time via the unsubscribe link.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations.

4. Data Sharing

We do not sell your personal data. We share it only with trusted service providers who process it on our behalf:

• Polar Software, Inc. — checkout, payment processing, subscriptions and invoicing, as merchant of record.
• Vercel — hosting and edge infrastructure.
• Supabase — managed PostgreSQL database hosting.
• Cloudflare R2 — storage for the images and files you upload (profile photo, block media, social preview images).
• Resend — delivery of our transactional emails, and of the newsletters you send to your own subscribers.
• OpenAI — powers the AI features. When you use one, the text you are working on is sent to OpenAI to generate the result. OpenAI does not use data submitted through its API to train its models.
• PostHog — product analytics on how the app itself is used, so we can improve it.
• Sentry — error diagnostics when something breaks.
• Upstash — short-lived counters used for rate limiting and AI usage limits.
• Google and Apple — only if you choose to sign in with them, and only to confirm your identity and email address.

All third-party processors are contractually bound to handle your data securely and only for the purposes we specify. These providers process data in the United States. We may also disclose data when required by law or to protect the rights and safety of Flowti and its users.

5. Cookies

We use cookies and similar technologies to operate our service. For a full explanation of the cookies we set and how to manage them, please see our Cookie Policy.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we are required to retain it for legal or compliance purposes (e.g., billing records retained for 7 years per financial regulations). Anonymized analytics data may be retained indefinitely.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your account and associated data.
• Portability: Receive your data in a machine-readable format.
• Opt-out of marketing: Unsubscribe from promotional emails at any time.
• CCPA (California residents): You have the right to know what personal information is collected, to opt out of its sale (we do not sell data), and to request deletion.

To exercise these rights, email us at support@flowti.co. We will respond within 30 days.

8. Children's Privacy

Flowti is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If we become aware that a child under 13 has provided us with personal data, we will delete it promptly. If you believe a minor has created an account, please contact us at support@flowti.co.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a prominent notice on our website at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

10. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us: