Privacy policy

Effective date: August 11, 2026. 1. Scope and controller This Privacy Policy explains how personal information is handled when you use MyFlow. The operator of the deployment you use is generally responsible for deciding how the Service is operated. For a self-hosted deployment, the organization or administrator that runs the instance may be the data controller. Contact that administrator or use the official MyFlow website for privacy questions. 2. Information we collect • Account information: email address, name, avatar, authentication details, organization membership, and settings. • Content: tables, records, documents, attachments, Skills, messages, prompts, configurations, and other information you choose to submit. • Usage and device information: IP address, browser or device details, operating system, request times, session information, diagnostic logs, and feature usage. Cookies or similar technologies may be used for sign-in, preferences, security, and performance. • Support, billing, and integration information: information you provide when requesting support, purchasing a paid feature, or connecting another service. 3. How we use information We use information to create and secure accounts; provide, store, synchronize, and share the Service; process uploads and requests; provide support; prevent fraud, abuse, and security incidents; maintain backups and reliability; process payments where applicable; comply with law; and improve the Service. We use only what is reasonably necessary for the relevant purpose. 4. Legal bases and choices Where applicable law requires a legal basis, processing may rely on performance of a contract, your consent, our legitimate interests, or legal obligations. You may withdraw consent where consent is the basis, but some features may no longer work. Optional analytics or integrations may have separate controls. 5. Sharing information We may share information with service providers that help us host storage, send email, provide support, monitor reliability, process payments, or deliver an integration or AI feature you enable. AI inputs and outputs may be processed by the provider selected by you or your administrator under that provider’s terms and privacy notice; retention and model-training use depend on the enabled provider and deployment configuration. Organization administrators may access Content and account information according to their permissions. We may also disclose information when required by law, to protect users and the Service, or as part of a merger, acquisition, or asset transfer. We do not sell personal information. 6. Storage and international transfers Content is stored in the storage system configured for the deployment, which may be local storage, MinIO, S3, or another provider. Depending on the deployment and provider, information may be processed in another country. Administrators should configure storage and providers to meet their own legal and security requirements. 7. Retention and deletion We retain information while an account or organization needs the Service and for as long as necessary for the purposes described above, backups, dispute resolution, security, or legal obligations. Retention in a self-hosted deployment is controlled in part by the organization administrator. Deletion requests may be subject to verification and lawful exceptions. 8. Security We use reasonable technical and organizational measures appropriate to the information and the Service. No online service can guarantee absolute security. Please use strong credentials and report suspected incidents promptly. 9. Your rights Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to certain processing, and to complain to a privacy regulator. Send requests to your service administrator or the contact method provided on the official MyFlow website. We may need to verify your identity before responding. 10. Children The Service is not intended for anyone who is not permitted to use it under the laws of their location. Do not submit a child’s personal information unless you have the required authority and consent. 11. Updates and contact We may update this Privacy Policy when our practices or legal obligations change. We will post the updated version with a new effective date and provide additional notice for material changes when required. Please contact your service administrator or the official MyFlow website with privacy questions.