Privacy Policy

1. Information we collect

Account information. Your email address and sign-in credentials (one-time codes and passkeys — we don't store passwords).

Business information you give us. What you tell the build wizard and chat: your business name, description, offerings, contact details, address and hours, social links, and any photos you upload. This is the material we build your website from.

Payment information. Payments are processed by Stripe. We receive subscription status and the card's last four digits — never your full card number.

Usage information. Standard technical logs (IP address, browser type, pages visited) used for security and to keep the Services running.

2. How we use your information

• to build, host, and update your website;
• to send transactional email — sign-in codes, build notifications, billing receipts;
• to respond to support requests;
• to secure, maintain, and improve the Services.

We do not sell your personal information, and we do not use it for third-party advertising.

3. Automated site generation

Flow generates your website using automated systems, including AI models. The business details you provide (your description, offerings, and preferences) are processed by these systems to design pages, write copy, and select imagery for your site.

Generated output becomes part of your website. We don't use your business details to train models of our own.

4. When we share information

We share information only with service providers who help us run Flow, and only as needed to provide the Services:

• Payments — Stripe processes subscriptions and stores your payment details.
• Hosting & infrastructure — the servers your website and our systems run on.
• Email delivery — the provider that carries our transactional email.
• Stock photography — photo search providers used to illustrate your site.
• Maps & geocoding — your business address is geocoded so your site's map shows your location, and address autocomplete in the wizard is powered by Google Maps.
• AI generation — design and content generation providers process your business details as described above.

We may also disclose information if required by law, or to protect the rights, safety, or property of Flow or others.

5. Cookies

Flow uses a single session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.

Your published website sets only the cookies needed for it to function; if you later add embedded third-party content to your site, that content may set its own cookies.

6. Data retention

We keep your information for as long as your account is active. If you delete your website or account, the site, its content, and associated business details are removed from our production systems as part of teardown; residual copies in backups age out on a rolling basis.

We may retain limited records (such as billing history) where the law requires it.

7. Security

We protect your information with encryption in transit (TLS), encryption at rest for stored secrets, and access controls that limit who and what can read customer data. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you as required by law.

8. Your rights and choices

You can access and update your business information at any time from your account, or by asking us in chat.

You can request a copy of your data, ask us to correct it, or ask us to delete your account and website entirely — reach us through the contact page. Depending on where you live (for example the EU/EEA, UK, or California), you may have additional statutory rights, which we honor.

9. Children

Flow is for businesses and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes we will notify you — for example by email or a notice in the product — before they take effect. The “Last updated” date above always reflects the current version.

11. Contact us

Questions about privacy or your data? Reach us any time through our contact page.