Legal · privacy

Privacy Policy

How Flow Pilot collects, uses and protects personal data, and the rights you have over it.

Last updated 15 October 2026

Who we are

Flow Pilot ("we", "us") provides operational software for small and mid-sized businesses. For account data we are the data controller. For business data you upload, we act as your processor under our Data Processing Agreement.

Data we collect

  • Account data: name, email address and sign-in method.
  • Billing data: plan, billing country and payment status, handled by our payment provider. We never store full card numbers.
  • Business data you add or connect, such as clients, tasks, invoices and CRM records.
  • Usage data: approximate location derived from your IP address (country and city, never precise device location), pages visited and errors.

Google sign-in

If you choose "Continue with Google" we receive your name, email address and profile picture from Google. We use these only to create and sign in to your account. You can review or revoke this access at any time in your Google account permissions. Google's handling of your data is covered by the Google Privacy Policy.

How we use it

To provide and secure the service, process payments, send service emails, generate the alerts and recommendations you request, and improve the product. Our legal bases are performance of contract, legitimate interests and, for optional analytics cookies, your consent.

AI features

When you use AI features, the text you submit is sent to our AI provider to produce a result. It is not used to train public models, and analyser inputs are not saved to your account.

Subprocessors

We use vetted providers for hosting and database, payments, email delivery and AI processing. A current list is available on request.

Retention

We keep account and business data while your account is active. When you delete your account, your data is deleted from live systems straight away and from backups within 30 days, except where the law requires us to keep billing records.

Your rights

Under UK and EU GDPR you can access, correct, export, restrict or delete your data and object to processing. You can export or delete your data yourself in Settings, or contact us. You may also complain to the Information Commissioner's Office (ico.org.uk).

Contact

Questions about privacy? Reach us through the Support page.

This document is a template provided in good faith. Have it reviewed by a qualified lawyer before relying on it.