Privacy Policy

1. Introduction

FlowBoard ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. We are SOC 2 Type II certified and GDPR compliant.

2. Information We Collect

Account Information: When you create an account, we collect your name, email address, company name, and team size. This information is necessary to provide the Service.

Usage Data: We automatically collect information about how you use the Service, including pages visited, features used, time spent, and interaction patterns. This data helps us improve the Service.

Project Data: We store the data you create within the Service, including projects, tasks, comments, and files. This data belongs to you.

3. How We Use Your Information

We use the information we collect to: provide, maintain, and improve the Service; send you technical notices, updates, and support messages; respond to your comments and questions; monitor and analyze usage trends; detect and prevent fraud and abuse; and comply with legal obligations.

4. Data Sharing

We do not sell your personal information. We may share your information with: service providers who assist in operating the Service (under strict data processing agreements); law enforcement when required by law; and parties involved in a merger, acquisition, or sale of assets (with prior notice).

5. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS 1.3) and at rest (AES-256), regular security audits, SOC 2 Type II compliance, and access controls with multi-factor authentication. Despite our efforts, no method of electronic storage is 100% secure.

6. Data Retention

We retain your account data for as long as your account is active. Upon account deletion, we will delete your data within 30 days, except where retention is required by law. Aggregated, anonymized data may be retained indefinitely for analytics purposes.

7. Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to: access your personal data; rectify inaccurate data; request deletion of your data; restrict processing; data portability; object to processing; and withdraw consent. To exercise these rights, contact us at hello@flowboard.io.

8. Cookies

We use essential cookies to operate the Service and analytics cookies to understand how you use it. You can control cookie settings through your browser. Disabling essential cookies may affect the functionality of the Service.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure adequate protection through Standard Contractual Clauses and data residency options for Business plan customers.

10. Children's Privacy

The Service is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such data, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Service. Your continued use after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at hello@flowboard.io.