Privacy Policy

1. Introduction

FlowShot (“we”, “us”, or “our”) operates the FlowShot platform, including its website and mobile applications (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your privacy. We do not sell your personal information to third parties.

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

2. Information We Collect

Information You Provide

• Account Information: Name, email address, phone number, password (encrypted)
• Organization Information: Company name, team member details, roles
• Project Data: Project details, client information, schedules, venues, notes
• Files and Media: Photos, videos, documents, and other files you upload
• Communications: Chat messages, comments, annotations, and feedback within the Service
• Payment Information: Billing address (payment card details are processed by our payment provider and are never stored by us)

Information Automatically Collected

• Usage Data: Pages visited, features used, time spent on the Service
• Device Information: Browser type, operating system, device type, screen resolution
• Log Data: IP address, access times, referring URLs
• Crash Reports: Application errors, stack traces, and device state at the time of a crash, collected to improve Service stability
• Push Notification Tokens: Device tokens used solely to deliver push notifications you have opted into

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Send you technical notices, updates, security alerts, and support messages
• Send push notifications (which you can disable at any time in your device settings)
• Respond to your comments, questions, and requests
• Monitor and analyze trends, usage, and activities to improve user experience
• Detect, investigate, and prevent fraudulent transactions, abuse, and security incidents
• Diagnose and fix technical problems via crash and error reporting

4. Third-Party Services

We use the following third-party services to operate the Service. Each service processes data in accordance with its own privacy policy, which we encourage you to review:

• Google Firebase: Authentication, database, file storage, hosting, and analytics
• Paddle: Payment processing, subscription billing, tax compliance, and refunds (Merchant of Record)
• Sentry: Error monitoring and crash reporting
• Resend: Transactional emails
• Bunny.net: Content delivery network for media files
• DeepL: Text translation
• Deepgram: Audio transcription
• Telegram: Notification delivery (optional integration)
• Apple Push Notification service (APNs): Push notifications on iOS devices

We are not responsible for the privacy practices of these third-party services. Your use of these services is subject to their respective terms and privacy policies.

5. Data Storage and Security

Your data is stored on secure servers provided by Google Cloud Platform (Firebase). We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS) and at rest, multi-tenant data isolation, and role-based access controls.

HOWEVER, NO METHOD OF TRANSMISSION OVER THE INTERNET OR ELECTRONIC STORAGE IS 100% SECURE. WHILE WE STRIVE TO PROTECT YOUR INFORMATION, WE CANNOT AND DO NOT GUARANTEE ITS ABSOLUTE SECURITY. YOU ACKNOWLEDGE THAT YOU PROVIDE YOUR INFORMATION AT YOUR OWN RISK.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it by law. Backup copies may persist for up to 90 days before being permanently removed.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Export: Request your data in a portable format
• Opt-out: Opt out of marketing communications and push notifications
• Restriction: Request restriction of processing of your personal information

To exercise these rights, please contact us at privacy@flowshot.app or use the account settings in the Service. We will respond to your request within 30 days.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the CCPA:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by businesses
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising your CCPA rights

We do not sell your personal information. To exercise your CCPA rights, contact us at privacy@flowshot.app.

9. European Users (GDPR)

If you are in the European Economic Area (EEA), we process your personal data based on the following legal bases: your consent, performance of a contract (providing the Service), and our legitimate interests (improving the Service, preventing fraud). You have the right to withdraw consent at any time.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. By using the Service, you consent to the transfer of information to the United States and other countries. We take steps to ensure that your data receives an adequate level of protection in the jurisdictions in which we process it.

11. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.

12. Cookies and Tracking

We use essential cookies to provide the Service functionality. We do not use third-party tracking or advertising cookies. You can control cookies through your browser settings. For more details, please see our Cookie Policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Last updated” date. Your continued use of the Service after any changes constitutes acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

• Email: privacy@flowshot.app