Privacy Policy

This privacy policy applies to Flow Rigs at flowrigs.app and related pages that link to this policy (including sign-in, registration, and authenticated areas of the product).

Flow Rigs is operated by the team behind the Flow Rigs service. For privacy requests, contact info@flowrigs.app.

Account and profile data. When you register, we collect your email address, display name, and username. If you choose a password, we store only a one-way hash—not the password itself. We also store your chosen avatar (either a built-in image from our site or, if you sign in with Google, a profile photo URL from Google), onboarding status, and category interests you select during setup.

Google sign-in. If you use Google to sign in, we receive your Google account identifier, email address, display name, profile photo URL when provided, and whether Google has verified your email. We use this information to create or link your Flow Rigs account. Google's use of your data is governed by Google's privacy policy.

Flows and social activity. When you create or edit flows, we store the title, description, steps (including step text and command content), visibility (public or private), category, tags, and timestamps. If you repost someone else's public flow, we store that repost association. Public flows and public profile fields (such as username, display name, and avatar) may be visible to other users and visitors according to the visibility you choose.

Authentication data. We issue short-lived access tokens and longer-lived refresh tokens to keep you signed in. Refresh tokens are stored in our database in hashed form and tied to your account.

Technical data. Like most web services, our servers and hosting providers may automatically process information such as IP address, browser type, device characteristics, and request logs when you use the site. We use this data to operate, secure, and troubleshoot the service.

Flow Rigs is a free service today. We do not collect payment card information through the product. We do not operate third-party advertising cookies on Flow Rigs, and we do not intentionally collect sensitive categories of personal data (such as health data or government ID numbers) through the service.

We use personal data to provide and maintain Flow Rigs, including creating accounts, authenticating users, storing and displaying flows, showing public profiles and feeds, and responding to support requests sent to info@flowrigs.app.

We use technical and usage-related data to protect the service—for example, to detect abuse, enforce our terms, and keep sessions secure. We do not sell your personal information.

Where privacy laws such as the GDPR or UK GDPR apply, we process personal data on bases that may include performance of a contract (providing the service you requested), legitimate interests (security, fraud prevention, and improving reliability), and compliance with legal obligations. We do not make decisions about you that produce legal or similarly significant effects based solely on automated processing.

We use cookies and similar technologies that are necessary to run the service:

Refresh token cookie. An HTTP-only cookie stores your refresh token so we can renew your session securely. It is required for staying signed in after you log in or register.

Session hint cookie. A non-HTTP-only cookie on our web app indicates whether you likely have an active session so the interface can load correctly. It does not contain your password or full account details.

We do not use advertising or cross-site tracking cookies on Flow Rigs today. You can control cookies through your browser settings; disabling authentication cookies will prevent you from staying signed in.

Flows you mark as public, along with your public profile information, may be viewed, copied, or reposted by other users within the product. Do not include secrets, credentials, or personal data you do not want others to see in public flows or profile fields.

Flow Rigs does not provide public forums, chat rooms, or customer testimonial publishing features beyond what you choose to publish as flows or profile content.

We share personal data only as needed to operate the service:

Service providers. Infrastructure and hosting providers that run our application and database may process data on our behalf under contractual obligations to protect it and use it only to provide their services to us.

Google. If you choose Google sign-in, Google processes your information under its own terms and privacy policy when you authenticate.

Legal requirements. We may disclose information if required by law, regulation, legal process, or enforceable governmental request, or when we believe disclosure is necessary to protect rights, safety, or the integrity of the service.

We do not sell personal information for money. We do not share personal information with third parties for their own marketing purposes.

Flow Rigs may be accessed from different countries. Your personal data may be stored and processed in locations where we or our service providers operate, which may differ from where you live.

Where required by applicable law, we implement appropriate safeguards for cross-border transfers. Flow Rigs is not certified under the EU-U.S. Data Privacy Framework or similar frameworks unless we state otherwise in an updated version of this policy.

You can update certain profile information (such as display name and avatar) from within the product when signed in.

There is no in-app control to delete your account today. To request access to, correction of, or deletion of your personal data—or to ask us to remove specific content—email info@flowrigs.app. We will respond within a reasonable time and as required by applicable law.

Where the GDPR or UK GDPR applies, you may also have the right to data portability, to restrict or object to certain processing, to withdraw consent where processing is based on consent, and to lodge a complaint with your local data protection authority.

Residents of U.S. states with comprehensive privacy laws may have additional rights to know, access, correct, or delete personal information and to opt out of certain processing.Flow Rigs does not sell personal information for money. We will not discriminate against you for exercising applicable privacy rights.

We retain personal data for as long as needed to provide the service, maintain your account, comply with legal obligations, resolve disputes, and enforce our agreements.

When you log out, we revoke the associated refresh token session. When data is no longer required for these purposes, we delete or anonymize it where feasible. You may request more detail about retention for specific data types by contacting info@flowrigs.app.

Flow Rigs is not directed at children under 16, and we do not knowingly collect personal data from children under 16. If you believe a child has provided us personal data, contact info@flowrigs.app and we will take steps to delete it.

We use administrative, technical, and organizational measures designed to protect personal data, including hashed passwords, HTTP-only authentication cookies in production, and access controls on our systems. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

We may update this privacy policy from time to time. When we do, we will revise the effective date at the top of this page. Material changes may also be communicated through the product or by email where appropriate. Continued use of Flow Rigs after changes take effect constitutes acceptance of the updated policy, except where applicable law requires otherwise.