FlowR Privacy Policy

1. Who we are

FlowR provides a browser extension for recording and replaying guided website walkthroughs.

Contact: support-flowr@celestialsynthesis.com

2. Data we process

a) Recording content

When a user actively records a walkthrough, FlowR may process and store step metadata such as action type and timestamp, URLs relevant to recorded steps, selector metadata used for replay, instruction text entered by the user, and optional screenshot content where screenshot capture is enabled.

b) Account and sharing data

If users create an account or sign in, FlowR may process account information such as email address and account identifier. If users share recordings, FlowR may also process recipient email addresses and permission settings.

c) Billing/subscription data

Subscription and billing workflows may involve payment-related metadata, subscription status, and processor records generated through Stripe.

d) Analytics data

Some deployments may enable product analytics events, subject to applicable sanitization, redaction, and configuration controls.

3. Storage model

FlowR is designed with a local-first model, which means recordings may be stored locally in browser extension storage. Where cloud sync is available and enabled for signed-in users, recordings and related screenshot artifacts may also be synchronized to cloud services.

4. Legal bases (EU/UK users)

For users in the EU or UK, processing may rely on one or more legal bases depending on the relevant feature or service context, including contract performance for service delivery, legitimate interests for security and reliability, consent for optional analytics or feature toggles where applicable, and legal obligations relating to billing or compliance records.

5. Data sharing and processors

FlowR may rely on service providers and subprocessors to support authentication, storage, billing, analytics, and communications. These may include Supabase for authentication, database, and storage services; Stripe for billing and subscription workflows; Amplitude for analytics where enabled; and email delivery providers used for sharing notifications.

6. Data retention

Retention periods depend on feature usage, account status, and applicable legal or operational requirements. Content stored locally generally remains available until the user deletes it or uninstalls the extension. Cloud-synced content may remain until the user deletes the data, the account is removed, or an applicable retention period expires. Billing records may be retained for longer where required by law.

7. Security

Reasonable technical and organizational measures may be applied to protect personal data and product content. No system or transmission method can be guaranteed to be completely secure.

8. User rights

Depending on the applicable jurisdiction, users may have rights to access, correct, delete, export, or restrict certain processing of their information.

For requests: support-flowr@celestialsynthesis.com

9. International transfers

Where information is processed across jurisdictions, appropriate safeguards should be applied in accordance with applicable law.

10. Children

FlowR is not intended for children below the applicable age of digital consent.

11. Changes

This policy may be updated from time to time. Material changes should be reflected by updating the effective date shown on this page.