Privacy policy

1. Who operates FlowHelpdesk

The service is operated by FlowHelpdesk. Privacy enquiries can be sent to the support contact shown in your account.

2. Information we process

Depending on how you use the service, we process:

• account details such as name and email address;
• authentication/session data and, where enabled, two-factor authentication state;
• plugin briefs, clarification answers and generated source required to provide the generation service;
• saved plugin projects, immutable versions and static security/compatibility reports;
• billing references such as Stripe customer/subscription identifiers and subscription state;
• technical data such as IP address, browser/user-agent, rate-limit and security event information;
• administrative/audit records where privileged platform actions are performed.

3. AI processing

Plugin briefs and clarification answers may be sent to the AI provider configured for FlowHelpdesk, such as OpenAI or Anthropic, to assess the brief and generate plugin source. Generated source may also be processed as part of the generation/update workflow. You should not submit information that is unnecessary for the plugin requirement, especially secrets, passwords or special-category personal data.

4. Safety and abuse records

Requests that appear malicious, deceptive, abusive, piracy-related or intended for unauthorised access can be blocked. The dedicated safety audit stores the policy category, rule, enforcement action, reason, technical request context and a one-way hash of the request. The raw prohibited prompt is not retained in that safety-audit table.

5. Payments

Payments and subscription management are handled through Stripe. FlowHelpdesk stores Stripe account/subscription references and billing state needed to operate your plan, but does not store full payment-card details. Stripe processes payment information under its own privacy terms.

6. Bot protection and security services

Where enabled, Cloudflare Turnstile is used to distinguish legitimate use from automated abuse. Necessary session/authentication cookies are used to keep you signed in and protect account actions. FlowHelpdesk does not currently depend on advertising cookies for the core service.

7. Why we use the information

We process information to provide the service you request, operate accounts and subscriptions, secure the platform, prevent abuse, maintain auditability, troubleshoot failures, improve reliability and meet legal/accounting obligations where they apply.

8. Retention

Saved projects and versions remain associated with your account so you can access your plugin history. Temporary build artifacts expire according to the platform build-retention setting. Security, billing and operational records may be retained where reasonably necessary for fraud prevention, audit, support, accounting or legal purposes. You can contact us to request account/data deletion, subject to data we must retain for legitimate legal or security reasons.

9. Service providers and international processing

FlowHelpdesk relies on infrastructure and specialist providers, including hosting/database services, the configured AI provider, Stripe, Cloudflare Turnstile and the configured email provider. Some providers may process information outside the United Kingdom. Where required, appropriate contractual or legal transfer safeguards should apply through those providers.

10. Your rights

Depending on applicable data-protection law, you may have rights to access, correct, erase, restrict or object to processing of personal data, and to request portability. You may also have the right to complain to the relevant data-protection authority.

11. Contact and changes

Privacy questions can be sent to the support contact shown in your account. We may update this notice when the service, providers or legal requirements change. The latest version will remain published here.