Privacy Policy

This Privacy Policy explains what personal data Flow Signals LLC ("Flow Signals", "we", "us") collects, why we collect it, who we share it with, and the choices you have. It applies to flowsignals.io and app.flowsignals.io.

1. The short version#

• We collect the data we need to sign you in, run your subscription, and deliver signal alerts.
• You sign in with Google, so we do not store a password for you.
• Payments are handled by Stripe. We do not store your full card number.
• The marketing site uses advertising and analytics tags. The app uses mostly essential cookies. See the Cookie Policy.
• We do not sell your personal data. You can ask us to access, correct, export, or delete your data on the Your Data Rights page.

2. Data we collect#

You give us

• Account data: your name and email address from your Google sign in, and your profile settings.
• Subscription data: the status of your subscription and billing records. Card details are handled by Stripe, not stored by us.
• Communications: messages you send to support, and your notification and email preferences.
• Mobile number: if you choose to turn on text message alerts, the mobile number you give us and your consent to receive texts. Providing a number is optional and is only used to send the alerts you ask for.

We collect automatically

• Usage and device data: pages viewed, actions taken, browser and device type, and similar technical data.
• Session data: a session cookie named flowsignals that keeps you logged in, plus security tokens.
• Web push data: if you turn on browser notifications, the push subscription details for your device so we can deliver alerts.
• Text message data: if you turn on SMS alerts, your mobile number, your consent record and its version, the alerts we send, and any opt out such as replying STOP. Message and data rates may apply. You can opt out at any time by replying STOP or by turning SMS off in the app.
• Approximate location: a general location derived from your IP address, used for security and fraud prevention.

3. Why we use your data#

• To create your account and sign you in.
• To run your subscription, process payments through Stripe, and send billing and account emails.
• To generate and deliver signal alerts by app, email, web push, and, if you turn it on, text message.
• To provide support and respond to your requests.
• To keep the Service secure, prevent fraud and abuse, and enforce our Terms.
• To measure and improve the Service, and, on our marketing site, to measure and run advertising.
• To meet legal, tax, and accounting obligations.

4. Legal bases#

Where laws such as the GDPR or UK GDPR apply, we rely on these legal bases: performing our contract with you (to run your account and subscription), our legitimate interests (to secure and improve the Service and to market it responsibly), your consent (for optional cookies, marketing, and web push, which you can withdraw), and legal obligation (for tax and records).

5. Who we share data with#

We do not sell your personal data. We share it only with service providers that help us run the Service, and only for that purpose:

• Stripe for payment processing and subscription billing.
• Google for sign in.
• Email and delivery providers for account, billing, and signal emails.
• SMS providers, if you turn on text alerts, to deliver those messages. We share only what is needed to send the alert, such as your mobile number and the message.
• Cloudflare for site delivery, performance, and security.
• Advertising and analytics providers on the marketing site, such as Google Ads and Meta, as described in the Cookie Policy.

We may also share data if the law requires it, to protect our rights and users, or as part of a business transfer such as a merger or sale. In that case we will require the recipient to honor this Policy.

6. How long we keep data#

We keep your data for as long as your account is active and for as long as we need it to run the Service, meet legal and tax obligations, resolve disputes, and enforce our agreements. When we no longer need it, we delete it or make it anonymous. You can ask us to delete your data sooner on the Your Data Rights page.

7. Your choices and rights#

Depending on where you live, you may have the right to access, correct, delete, or export your data, to object to or limit certain processing, and to opt out of marketing. You will not be treated unfairly for using these rights. To make a request, visit Your Data Rights or email [email protected]. You can turn off marketing emails using the unsubscribe link in any marketing message, and you can turn off web push in your browser or device settings.

8. How we protect your data#

We use reasonable technical and organizational safeguards designed to protect your data, including encryption in transit, secure sign in through Google, and protected sessions. No method of storage or transfer is perfectly secure, so we cannot promise absolute security. Read more on the Security page.

9. Children#

The Service is for adults and is not directed to children under 18. We do not knowingly collect data from children. If you believe a child gave us data, contact us and we will delete it.

10. International users#

We operate from the United States and may process your data there. If you use the Service from another country, you understand that your data may be transferred to and processed in the United States, where privacy laws may differ from your own.

11. Changes to this Policy#

We may update this Policy from time to time. We will change the "Last updated" date at the top and, for important changes, give you notice in the app or by email.

12. Contact us#

For any privacy question or request, email [email protected].