Privacy Policy

This Privacy Policy describes how Flowstate Labs (“Flowstate Labs,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes personal information in connection with our websites, applications, products, and related services (collectively, the “Services”). By accessing or using the Services, you acknowledge the practices described in this Policy.

Certain products may be subject to additional privacy terms that apply specifically to those products. Where such terms exist, they supplement this Policy. In the event of a conflict, the product-specific terms control with respect to that product.

1. Controller

Flowstate Labs is the entity responsible for the processing of personal information under this Policy. For privacy-related inquiries, contact us at hello@flowstateslabs.com.

2. Scope

This Policy applies to personal information we process when you:

• Visit or interact with our websites or marketing materials;
• Create an account, subscribe to communications, or otherwise contact us;
• Download, access, or use any of our applications or related Services.

3. Information We Collect

The categories of personal information we collect depend on how you interact with the Services and may include:

• Identifiers and contact information, such as name, email address, username, and account credentials;
• Commercial and transactional information, such as subscription status and payment-related records (payment card details are processed by our payment processors and are not stored in full by Flowstate Labs);
• User content, including information, files, messages, and other materials you submit or generate through the Services;
• Device and usage information, such as device type, operating system, application version, diagnostic and crash data, log data, and approximate location derived from IP address;
• Communications, including correspondence you send to us and related metadata.

We may also collect information automatically through cookies, local storage, and similar technologies, and from third parties such as authentication providers, analytics vendors, and payment processors, where you choose to use features that rely on those services.

Some Services are designed to process data primarily on your device or local network. In those cases, the applicable product documentation or product-specific privacy terms describe what, if any, information is transmitted to our servers.

4. How We Use Personal Information

We use personal information for the following purposes:

• To provide, operate, maintain, and improve the Services;
• To create and manage accounts and authenticate users;
• To process transactions and send related notices;
• To respond to inquiries and provide customer support;
• To send administrative messages and, where permitted, product updates and marketing communications;
• To monitor performance, diagnose errors, and enhance security;
• To detect, prevent, and address fraud, abuse, and other harmful activity;
• To comply with applicable laws, regulations, and legal process; and
• To establish, exercise, or defend legal claims.

We do not sell personal information. We do not use customer content to train publicly available artificial intelligence models.

5. Legal Bases for Processing

Where required by applicable law (including the GDPR), we process personal information on one or more of the following bases: performance of a contract; our legitimate interests in operating and securing the Services (provided such interests are not overridden by your rights); compliance with legal obligations; and consent, where consent is required.

6. Disclosure of Personal Information

We may disclose personal information to:

• Service providers and processors that perform services on our behalf, such as hosting, infrastructure, analytics, email delivery, customer support, and payment processing, subject to contractual confidentiality and use restrictions;
• Professional advisors, including lawyers, auditors, and insurers, where reasonably necessary;
• Authorities and other parties when we believe disclosure is required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Flowstate Labs, our users, or others;
• Successors in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, in which case personal information may be transferred as part of that transaction subject to applicable law.

We do not disclose personal information to third parties for their independent marketing or advertising purposes.

7. Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Policy, including to provide the Services, comply with legal obligations, resolve disputes, enforce our agreements, and maintain appropriate business and financial records. Retention periods vary depending on the nature of the information and the context in which it was collected. When personal information is no longer required, we will delete or de-identify it in accordance with our retention practices, except where retention is required or permitted by law.

8. Security

We implement administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

9. Your Rights and Choices

Depending on your jurisdiction, you may have rights with respect to your personal information, which may include the right to access, correct, update, delete, or obtain a copy of certain personal information; to object to or restrict certain processing; to withdraw consent where processing is based on consent; and to lodge a complaint with a supervisory authority.

You may also unsubscribe from marketing emails using the link in those messages, and manage certain preferences within the applicable product settings where available.

To exercise applicable rights, contact us at hello@flowstateslabs.com. We may need to verify your identity before responding. We will respond in accordance with applicable law.

10. Children’s Privacy

The Services are not directed to children under the age of 13 (or the minimum age required by applicable law in your jurisdiction), and we do not knowingly collect personal information from children. If we learn that we have collected personal information from a child without appropriate consent, we will take steps to delete it. Parents or guardians who believe we may have collected such information should contact us at hello@flowstateslabs.com.

11. International Transfers

Flowstate Labs may process and store personal information in the United States and other countries where we or our service providers operate. Those countries may have data protection laws that differ from the laws of your jurisdiction. Where required, we implement appropriate safeguards for cross-border transfers, which may include standard contractual clauses or other legally recognized transfer mechanisms.

12. Third-Party Services

The Services may contain links to or integrations with third-party websites, products, or services that are not controlled by Flowstate Labs. This Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you use.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The “Effective Date” at the top of this page indicates when this Policy was last revised. Material changes will be posted on this page and, where appropriate or required by law, communicated through the Services or by other reasonable means. Your continued use of the Services after an update becomes effective constitutes acceptance of the revised Policy, except where applicable law requires additional consent.

14. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact:

Flowstate Labs
Email: hello@flowstateslabs.com