FlowForge ("FlowForge", "we", "us", or "our") respects your privacy and is committed to handling personal information responsibly.
This Privacy Policy explains what information FlowForge collects or processes, why it is used, how it is protected, when it may be shared, and the choices and rights available to users.
FlowForge is a Chrome extension and related service that provides browser-based automation functionality, including functionality involving Google Flow.
For purposes of this Privacy Policy, "FlowForge" refers to the operator of the FlowForge service.
By using FlowForge, you acknowledge that you have read and understood this Privacy Policy.
1. Information We Collect or Process
1.1 Email Address
When you create or use a FlowForge account, we process your email address.
Your email address may be used for:
- Creating and identifying your FlowForge account
- Authentication and login
- Email verification
- Password recovery
- Important account and security communications
- Responding to support requests where applicable
1.2 Passwords
FlowForge uses password-based authentication through Supabase Auth.
When you authenticate, you provide a password to the authentication service. FlowForge does not have access to or store your plaintext password.
Supabase Auth handles password storage using secure password hashing. Supabase documents that passwords are stored as hashes rather than plaintext passwords.
We do not use your FlowForge password for unrelated purposes.
1.3 Display Name and Country
When you create a FlowForge account, you are required to provide a display name and country.
This information is stored as part of your account profile and is displayed to you within the Account section of the extension.
1.4 Account and Authentication Identifiers
FlowForge processes identifiers associated with your account, including the unique user identifier generated by our authentication system.
These identifiers allow us to associate your authenticated account with authorized FlowForge data and services.
1.5 Session and Security Information
FlowForge processes information necessary to authenticate users and protect accounts.
This may include information required to:
- Maintain an authenticated session
- Validate authentication status
- Enforce account security
- Enforce FlowForge's single-active-session security mechanism
- Detect or prevent unauthorized access or misuse
FlowForge does not use invasive device fingerprinting for advertising purposes.
1.6 Information You Voluntarily Provide to Support
FlowForge provides support options such as email and WhatsApp.
If you voluntarily contact us, we may receive information that you choose to provide, such as your email address, message, screenshots, attachments, or other information included in your support request.
We use this information to respond to and resolve support requests.
1.7 Browser and Google Flow Interaction
FlowForge is designed to assist with browser-based automation involving Google Flow.
The extension may interact with the relevant webpage and browser environment as necessary to provide its functionality.
FlowForge does not ask users to provide their Google or Gmail password to FlowForge.
FlowForge does not collect or store your Google/Gmail password.
FlowForge does not intentionally collect your general browsing history or unrelated Google account information.
FlowForge does not upload or store Google Flow content on our backend unless a specific feature explicitly requires such processing and that practice is disclosed before it is introduced.
2. How We Use Information
We may use information for the following purposes:
- Providing and operating FlowForge
- Creating and maintaining user accounts
- Authenticating users
- Verifying email addresses
- Recovering accounts
- Maintaining account information
- Maintaining session and account security
- Preventing unauthorized access and abuse
- Providing customer support
- Maintaining and improving the reliability and security of the service
- Complying with applicable legal obligations
- Protecting our rights and the security of our users and infrastructure
We do not use personal information for purposes unrelated to the operation and legitimate needs of FlowForge unless permitted by law or with appropriate notice or consent where required.
3. Data Sharing
We do not sell your personal information.
We may share or allow access to information only where reasonably necessary to operate, secure, maintain, or support FlowForge.
This may include trusted infrastructure and service providers that process information on our behalf, such as authentication, database, hosting, or related technical service providers.
We may also disclose information where required by applicable law, legal process, or a valid governmental request, or where reasonably necessary to protect the security, rights, property, or users of FlowForge.
4. Supabase
FlowForge uses Supabase as part of its backend infrastructure, including authentication and database services.
Supabase processes information according to the services it provides and its applicable policies and security practices.
FlowForge does not provide users' plaintext passwords to third parties for unrelated purposes.
5. Data Security
We use reasonable technical and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction.
These measures may include:
- Authentication controls
- Access controls
- Database Row Level Security where applicable
- Server-side validation for privileged operations
- Secure HTTPS/TLS communications
- Account and session security controls
However, no internet-based service can guarantee absolute security.
You are also responsible for maintaining the security of your account credentials and for notifying us of suspected unauthorized access where appropriate.
6. Data Retention
We retain personal information for as long as reasonably necessary to:
- Provide the FlowForge service
- Maintain account functionality
- Maintain security
- Prevent abuse or fraud
- Resolve disputes
- Comply with legal obligations
- Protect our legal rights
When information is no longer reasonably required for these purposes, it may be deleted, anonymized, or securely disposed of where appropriate.
We do not promise a fixed retention period unless a specific retention period is required by law or explicitly stated for a particular type of information.
7. Your Privacy Rights
Depending on where you live and applicable law, you may have rights relating to your personal information.
These may include rights to:
- Request access to personal information we hold about you
- Request correction of inaccurate information
- Request deletion of certain personal information
- Request restriction of certain processing
- Object to certain processing
- Request portability of certain information where applicable
- Withdraw consent where processing is based on consent
To exercise applicable rights, contact us using the contact information provided below.
We may need to verify your identity before completing certain requests.
Nothing in this Privacy Policy is intended to remove or limit privacy or consumer rights that cannot legally be excluded.
8. Account Deletion
If you want to request deletion of your FlowForge account and associated personal information, contact us at:
zk.automations.official@gmail.com
Certain information may need to be retained where required by law or reasonably necessary for security, fraud prevention, dispute resolution, or protection of legal rights.
9. Children's Privacy
FlowForge is not intended to knowingly collect personal information from children in circumstances where such collection is prohibited by applicable law.
If you believe that a child has provided personal information to us in violation of applicable requirements, please contact us so that we can review the situation and take appropriate action.
10. Third-Party Services
FlowForge may depend on third-party services and infrastructure.
These services may include authentication, hosting, database, communication, browser, or other technical services.
Third-party services have their own privacy policies and terms. We encourage users to review the policies applicable to services they use.
FlowForge does not control the privacy practices of independent third parties.
11. Google Services
FlowForge may interact with Google services, including Google Flow, through the user's browser.
FlowForge is an independent service and is not Google.
Unless explicitly stated otherwise, FlowForge is not affiliated with, endorsed by, sponsored by, or officially connected to Google.
Users remain responsible for complying with applicable Google terms and policies when using Google services.
12. International Data Processing
Depending on the infrastructure and service providers used by FlowForge, personal information may be processed or stored in countries other than the country where you live.
Where applicable law requires specific safeguards for international transfers, we will seek to use appropriate safeguards.
13. Cookies and Tracking
FlowForge does not use personal information for advertising-based tracking.
We do not intentionally use the extension to create advertising profiles based on users' browsing activity.
The FlowForge website uses Cloudflare Web Analytics, a privacy-focused analytics service, to measure website usage and performance.
Cloudflare Web Analytics may provide us with aggregated website metrics such as page views, visits, referral information, country, device type, browser and operating system dimensions, and website performance measurements.
Cloudflare Web Analytics applies to this website only. It does not track FlowForge Chrome extension usage, Google Flow activity, or the prompts and generations you run through the extension, and it is not used to create advertising profiles or advertising tracking.
If future functionality introduces analytics, advertising, tracking technologies, or other materially different data practices, this Privacy Policy will be updated as appropriate.
14. Data Breaches and Security Incidents
If we become aware of a security incident involving personal information that requires notification under applicable law, we will take reasonable steps to investigate, mitigate, and provide notifications as required.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to FlowForge, our data practices, legal requirements, or security practices.
When material changes are made, we may provide appropriate notice through the service or other reasonable means.
The "Effective Date" at the beginning of this Privacy Policy indicates when the current version became effective.
16. Contact Us
For privacy questions, data requests, account deletion requests, or concerns about this Privacy Policy, contact:
FlowForge
Privacy/Support Email: zk.automations.official@gmail.com
17. Separate Terms and Conditions
Your use of FlowForge is also governed by the FlowForge Terms & Conditions.
The Terms & Conditions govern your use of the service, while this Privacy Policy explains how personal information is handled.