Privacy Policy

We collect information you provide directly, information generated when you use FlowEdit, and limited technical information required to operate and secure the service.

Account information

When you create or use a FlowEdit account, we may collect:

• your email address
• your FlowEdit account identifier
• authentication information
• basic profile information provided by supported sign-in providers such as Google
• your account plan
• subscription status
• credit balance and usage information

Authentication is provided through Supabase.

The web application and Chrome extension use the same FlowEdit account infrastructure. Your plan, subscription status, credit balance, and generation records are associated with your account rather than a particular interface.

If you sign in with Google, FlowEdit does not receive your Google password.

Uploaded images and creative content

When you use FlowEdit, you may provide:

• product images
• reference images
• prompts and written instructions
• selected presets
• generation settings
• generated images

We process this information in order to provide FlowEdit's image-editing and image-generation features.

You should only upload content that you have the right to use.

Generation information

When you create or edit an image, FlowEdit may store:

• generation identifier
• generation mode, such as Edit or Inspire
• prompt or instructions
• generation settings
• generation status
• source image storage reference
• generated image storage reference
• creation and completion timestamps
• provider request identifiers
• credit usage information

This information may appear in your Results or generation history.

Billing information

If you purchase a FlowEdit subscription, payments are processed by Stripe.

FlowEdit may receive billing-related information from Stripe, including:

• Stripe customer identifier
• subscription status
• plan information
• payment status
• renewal status
• cancellation status
• limited billing information needed to manage your subscription

FlowEdit does not directly store your full payment-card number.

Stripe processes your payment information according to its own privacy practices.

Support communications

If you contact us, we may collect:

• your email address
• the contents of your message
• information you choose to provide in connection with your request

Technical information

We process limited technical information necessary to operate, secure, troubleshoot, and improve FlowEdit.

This may include:

• IP address
• browser or device information
• HTTP request method and path
• response status
• request duration
• authentication events
• generation errors
• server error messages
• information used for rate limiting, fraud prevention, and abuse prevention

FlowEdit's backend does not intentionally log:

• uploaded image bodies
• access tokens
• complete prompts
• successful signed image URLs

Third-party infrastructure providers may maintain their own technical logs according to their respective privacy policies.

We use information collected through FlowEdit to:

• create and maintain user accounts
• authenticate users
• provide image-generation and image-editing functionality
• process uploaded images and prompts
• display generated results
• maintain generation history
• manage credits and usage limits
• process and manage subscriptions
• process payments
• respond to support requests
• maintain FlowEdit's security and reliability
• detect fraud, abuse, and unauthorized use
• diagnose technical problems
• improve FlowEdit's usability and performance
• measure marketing performance where permitted
• comply with applicable legal obligations

FlowEdit uses fal – Features & Labels, Inc. ("fal.ai") to provide access to Meta's Muse image model.

Requests submitted through the web application or Chrome extension use the same FlowEdit backend and AI-processing infrastructure.

When you submit an image-generation or image-editing request, FlowEdit may send fal.ai:

• your prompt or instructions
• generation settings
• a temporary signed URL that allows fal.ai to retrieve the image you selected

FlowEdit currently uses the model:

meta/muse-image/edit

fal.ai may retain request or processing information according to its own terms and data-processing practices.

FlowEdit does not currently guarantee that provider-side request data is immediately deleted after generation.

AI training

FlowEdit does not make an independent guarantee that third-party AI providers never use submitted information for model training or improvement.

fal.ai's handling of customer content is governed by its applicable API terms, data-processing terms, and the status of the model being used.

You can review fal.ai's privacy and data-processing information at:

• https://fal.ai/legal/privacy-policy
• https://fal.ai/legal/api-services
• https://fal.ai/legal/data-processing-addendum

FlowEdit stores uploaded source images and generated images in a private Supabase Storage bucket.

Content submitted through the Chrome extension is handled by the same storage and generation-record systems as content submitted through the web application. Extension generations may appear in your account's web Results experience.

FlowEdit stores related generation and account data in Supabase Postgres, including:

• prompts
• generation settings
• image storage references
• generation statuses
• timestamps
• provider request identifiers
• credit usage information

Uploaded images may temporarily pass through FlowEdit's Railway-hosted backend while they are validated and transferred.

Uploads are not intentionally written to Railway's persistent filesystem.

Signed image URLs used by FlowEdit are temporary.

Expiration of a signed URL does not delete the underlying stored image.

Some information may still be retained when a generation fails.

Source images associated with failed generation records may be retained for generation history and troubleshooting.

Partially created output files are removed on a best-effort basis.

Requests rejected before storage may not result in a stored image or generation record.

FlowEdit currently retains:

• uploaded images
• generated images
• prompts
• generation settings
• generation records

until they are manually deleted or a deletion process is performed.

FlowEdit does not currently apply an automatic expiration period to stored generation content.

We may also retain certain information where reasonably necessary to:

• maintain your account
• provide generation history
• manage subscriptions
• comply with accounting, tax, or legal obligations
• prevent fraud or abuse
• resolve disputes
• enforce our agreements

We may introduce automatic retention periods in the future. If we do, this Privacy Policy will be updated accordingly.

FlowEdit does not currently provide an automated self-service account-deletion feature.

You may request deletion of your FlowEdit account by contacting:

zerostonedigital@gmail.com

Deletion requests are handled manually.

A complete deletion process may include, where applicable:

• handling or cancelling an active Stripe subscription
• deleting stored FlowEdit images
• deleting authentication and account records
• deleting generation records
• requesting deletion from service providers where applicable

Some information may be retained where necessary for:

• tax or accounting obligations
• fraud prevention
• dispute resolution
• legal compliance
• enforcement of our agreements

Because FlowEdit currently uses multiple infrastructure and processing providers, deletion may not occur instantaneously across every system.

FlowEdit uses third-party providers to operate the service.

Supabase

Supabase provides:

• authentication
• database infrastructure
• private image storage

Privacy policy:

https://supabase.com/privacy

Railway

Railway hosts FlowEdit's backend infrastructure.

Privacy policy:

https://railway.com/legal/privacy

Stripe

Stripe processes subscription payments and provides billing-management functionality.

Privacy policy:

https://stripe.com/privacy

fal.ai

fal.ai provides AI image-processing infrastructure used by FlowEdit.

Privacy policy:

https://fal.ai/legal/privacy-policy

Cloudflare

FlowEdit uses Cloudflare Web Analytics on its web properties, with your optional website-analytics consent, to understand traffic and performance without traditional analytics cookies. Cloudflare may also provide infrastructure, security, DNS, and performance services.

Cloudflare processes information according to its own privacy practices.

Privacy policy:

https://www.cloudflare.com/privacypolicy/

Google Ads

FlowEdit may use Google Ads conversion measurement to understand whether advertising campaigns lead to actions such as:

• account creation
• successful first generation
• checkout initiation
• subscription purchase

Google advertising and conversion technologies may use cookies or similar technologies where permitted.

The Google Ads tag loads only after you accept optional advertising and measurement technologies. You can change this choice later through Cookie preferences.

Eligible conversion events include an event transaction ID; a confirmed subscription purchase may also include its price and currency. FlowEdit does not send your email, uploaded images, or prompts with these events.

Google processes information according to its own privacy practices.

Privacy policy:

https://policies.google.com/privacy

FlowEdit uses technologies necessary to operate the service.

Essential technologies

Essential cookies, browser storage, or similar technologies may be used to:

• maintain authentication sessions
• keep you signed in
• secure your account
• remember application state
• provide core functionality

These technologies are necessary for the operation of FlowEdit.

Optional website analytics and advertising measurement

FlowEdit may use Google Ads conversion tracking to measure advertising performance.

The Google Ads tag is off until you accept optional advertising measurement. The Cloudflare Web Analytics beacon is off until you accept optional website analytics. These choices are separate.

You can:

• accept optional cookies
• reject optional cookies
• manage your preferences

Your choices are stored in your browser. You can change or withdraw them through Cookie preferences in the footer or workspace account menu. Essential account functionality remains available if you reject optional technologies.

Cloudflare Web Analytics

When you opt in, FlowEdit uses Cloudflare Web Analytics for privacy-focused website analytics and performance measurement without traditional client-side analytics cookies.

These website preferences do not automatically apply inside the Chrome extension, which uses extension storage for its essential account and selected-image state. The extension itself does not include Google Ads or Cloudflare Web Analytics tags.

FlowEdit may measure certain events to understand the effectiveness of advertising campaigns.

Examples may include:

• account registration
• first successful image generation
• pricing-page visits
• checkout initiation
• paid subscription purchase

We aim to limit advertising measurement to information reasonably necessary to evaluate campaign performance.

FlowEdit does not intentionally send:

• uploaded product images
• generated image contents
• image prompts

to Google Ads for advertising measurement.

We do not sell your personal information to advertisers.

We may share information with service providers where necessary to:

• authenticate users
• host FlowEdit
• store images and account information
• process AI generation requests
• process payments
• measure advertising performance
• provide customer support
• detect fraud or abuse
• comply with legal obligations

We may also disclose information where required by law, legal process, or a valid governmental request.

We use reasonable technical and organizational measures intended to protect information processed through FlowEdit.

These include measures such as:

• HTTPS-encrypted connections
• authenticated access controls
• private image storage
• signed image URLs
• backend authorization checks
• separation of public and secret API credentials
• third-party authentication and payment providers

However, no system or method of transmission can be guaranteed to be completely secure.

Do not submit passwords, payment-card information, or other highly sensitive personal information through FlowEdit prompts or support messages.

Depending on where you live, you may have rights regarding your personal information.

These may include rights to:

• request access to your personal information
• request correction of inaccurate information
• request deletion of information
• object to certain processing
• request restriction of certain processing
• request a copy of certain information
• withdraw consent where processing depends on consent
• complain to an applicable data-protection authority

These rights may be subject to legal limitations or exceptions.

To make a privacy request, contact:

zerostonedigital@gmail.com

We may need to verify your identity before completing a request.

If the GDPR or similar data-protection laws apply, FlowEdit processes personal information only where an appropriate legal basis exists.

Depending on the processing activity, this may include:

• performance of a contract with you
• compliance with legal obligations
• legitimate interests in operating, protecting, and improving FlowEdit
• consent, where required

For advertising or non-essential tracking technologies, FlowEdit will seek consent where applicable law requires it.

FlowEdit uses service providers that may operate infrastructure in different countries.

As a result, information may be processed outside Sweden or outside the country where you live.

Where applicable law requires safeguards for international transfers of personal information, FlowEdit or its service providers may rely on legally recognized transfer mechanisms.

FlowEdit is not intended for children who are below the minimum age required to consent to online services in their jurisdiction.

We do not knowingly collect personal information from children in violation of applicable law.

If you believe a child has improperly provided personal information to FlowEdit, contact:

zerostonedigital@gmail.com

FlowEdit may link to third-party websites or services.

Their privacy practices are governed by their own privacy policies.

FlowEdit is not responsible for the privacy practices of third-party websites or services.

We may update this Privacy Policy from time to time.

When we make changes, we will update the "Last updated" date at the top of this page.

If changes are material, we may provide additional notice where required by applicable law.

The FlowEdit Chrome extension provides image editing and generation from a browser side panel. When you right-click an image and choose "Edit with AI," the extension stores that image's URL, the page URL, and a timestamp in Chrome extension local storage. This selection expires after 30 minutes and is cleared when you sign out.

The extension displays the selected image from its URL before generation. It fetches the image bytes and sends the image, your prompt, and the selected mode to FlowEdit's authenticated backend only when you press Generate. It does not intentionally scan or upload unrelated webpage content or automatically submit images for AI processing.

The extension uses a Supabase authentication session stored in Chrome extension local storage to authorize requests. It shares your FlowEdit account, credits, subscription status, backend, and generation records with the web application. The extension does not permanently store generated image files or prompt history in Chrome extension storage; the current result and prompt remain in panel memory, while submitted and generated content follows the storage and retention practices described above.

Its browser permissions enable the image context menu, side panel, local storage, and user-requested downloads. Broad HTTP and HTTPS host access lets the extension fetch an image you select from a website when you generate; the current extension does not inject a content script to read full page contents. A selected page URL is stored locally as part of the temporary image context and is not sent to the FlowEdit backend as a separate field.

Website cookie preferences and website advertising tags do not automatically apply to the extension. The extension uses authentication and FlowEdit API requests, but its current application code does not include Google Ads or Cloudflare Web Analytics tags.

If you have questions about this Privacy Policy or how FlowEdit handles information, contact:

For privacy-related requests, use the same email address:

zerostonedigital@gmail.com