Legal

Privacy Policy

What we collect, why, who we share it with, and how to get it out. The shortest version of this we could write without leaving anything important out.

Last updated May 1, 2026.

The short version

We collect the minimum we need to run Flowcorder: your account info, the URLs and prompts you send us, the videos and scripts we generate for you, and basic product analytics. We don’t sell your data. We don’t train models on your inputs or outputs without an explicit opt-in. You can export or delete your data anytime from Studio.

1. What we collect

Account data: name, email, hashed password (or OAuth provider ID), team membership, billing details handled by Stripe.
Project data: the URLs you point Flowcorder at, your natural-language prompts, generated capture scripts, screenshots, and rendered videos.
Usage data: renders run, minutes of compute consumed, error logs, IP address, browser/OS, and timestamps.
Cookies: a session cookie for auth and a small set of strictly-necessary cookies. We do not use third-party advertising cookies.

2. Why we collect it

To run the service (generate videos, store your projects, bill you), to keep it healthy (debugging, abuse prevention, capacity planning), and to communicate with you about your account. That’s the list.

3. AI providers and your inputs

Flowcorder calls third-party AI providers (Anthropic and others) to turn your prompts into capture scripts. Your prompts and the page context Flowcorder collects to plan the script are sent to those providers under their zero-retention or short-retention policies. We do not use your inputs or outputs to train Flowcorder’s own models, and we have configured our providers not to train on them either. If we ever offer a training opt-in, it will be opt-in, off by default, and worth something to you.

4. Who we share data with

Sub-processors only: Cloudflare (hosting and edge compute), Anthropic and other AI providers (inference), Stripe (payments), Resend or similar (transactional email), and Sentry or similar (error reporting). Each is bound by a data-processing agreement. The current list lives at flowcorder.com/subprocessors and we’ll notify customers before adding new ones. We also disclose data when legally compelled, and we’ll tell you unless we’re prohibited from doing so.

5. Where data lives

Primary storage is on Cloudflare’s global infrastructure. Inference traffic may be routed to provider regions in the US and EU. If you have data-residency requirements, talk to us about an Enterprise plan.

6. How long we keep things

Account data is kept while your account is active and for 30 days after deletion (so we can restore it if you change your mind). Generated videos and scripts persist until you delete them or close the account. Logs and usage telemetry are retained for 90 days. Billing records are kept for 7 years to satisfy tax law.

7. Your rights

You can access, export, correct, and delete your data from Studio. If you’re in the EU, UK, California, or anywhere with similar laws, you have additional rights under GDPR / UK GDPR / CCPA — including the right to object, restrict processing, and lodge a complaint with your local supervisory authority. Email [email protected] and we’ll handle the request within 30 days. We don’t sell personal information and we don’t engage in cross-context behavioral advertising.

8. Security

Data in transit is TLS 1.2+. Data at rest is encrypted by our cloud providers. Access is least-privilege, audited, and limited to the engineers who need it to keep the service running. If we ever have a breach affecting your data, we’ll notify you without undue delay and within the windows required by applicable law. Report suspected vulnerabilities to [email protected].

9. Children

Flowcorder is not intended for users under 16. We don’t knowingly collect data from children.

10. Changes to this policy

We’ll post material changes in Studio and email account owners at least 14 days before they take effect. The “last updated” date at the top of this page always reflects the current version.

11. Contact

Privacy questions, requests, or complaints: [email protected]. A real human will read it.