Privacy Policy

Last updated: April 2026

Flow Adlytics ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

This policy applies to our website, application, and all related services (collectively, the "Service").

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Your name and email address (provided via your login provider)

1.2 OAuth Tokens

When you connect an advertising platform or Google Sheets, we store:

• OAuth access tokens (used to read data from your connected platforms)
• OAuth refresh tokens (used to maintain your connection without re-authentication)
• Connected ad account IDs and names
• Connected Google account email address

We request only the minimum permissions needed. For advertising platforms, we request read-only access (ads_read). We cannot and do not modify your advertising campaigns.

1.3 Report Configuration

We store the settings you configure for your reports, including selected metrics, dimensions, schedules, and target Google Sheet identifiers.

1.4 Usage Data

We may collect basic usage data such as pages visited, features used, and timestamps of interactions with the Service. This helps us improve the product.

1.5 What We Do NOT Collect

• We do not collect or store your Facebook/Google passwords
• We do not permanently store your advertising data (it is fetched and delivered to your Sheets in real-time)
• We do not collect payment card details (these are handled by our payment processor, Stripe)

2. How We Use Your Information

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

3. Data Sharing

We share data only with the following categories of third parties, and only as necessary to provide the Service:

• Meta (Facebook): We use your stored token to make API calls to fetch your advertising data. Meta's privacy policy applies to data held by Meta.
• Google: We use your stored token to write data to your Google Sheets. Google's privacy policy applies to data held by Google.
• Supabase: Our backend database provider, which stores your account data and tokens with encryption at rest. Supabase is SOC 2 Type II compliant.
• Stripe: Our payment processor. Stripe handles all payment card data directly — we never see or store your card details.
• Base44: Our frontend hosting provider.

We may also disclose information if required by law, regulation, or legal process.

4. Data Security

We take the security of your data seriously and implement the following measures:

• Encryption at rest: All tokens and credentials are encrypted in our database
• OAuth 2.0: Industry-standard authentication — we never see your platform passwords
• Read-only access: We request only ads_read permission, never ads_management
• Row Level Security: Database policies ensure users can only access their own data
• HTTPS: All data in transit is encrypted via TLS/SSL
• Token refresh: Tokens are automatically refreshed and old tokens are overwritten

While we implement strong security measures, no system is completely secure. We cannot guarantee absolute security of your data.

5. Data Retention

• Active accounts: We retain your data for as long as your account is active
• Deleted accounts: When you delete your account, we revoke all connected platform tokens and delete your stored data within 30 days
• Run logs: Report execution logs are retained for 90 days for debugging purposes, then automatically deleted
• Advertising data: We do not retain your advertising data — it passes through our system and is delivered to your Google Sheets

6. Your Rights (GDPR)

If you are located in the UK or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR) and UK GDPR:

• Right of access: You can request a copy of the personal data we hold about you
• Right to rectification: You can ask us to correct inaccurate data
• Right to erasure: You can ask us to delete your data (use the "Delete Account" feature in Settings, or email us)
• Right to restrict processing: You can ask us to limit how we use your data
• Right to data portability: You can request your data in a machine-readable format
• Right to object: You can object to our processing of your data based on legitimate interests
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at hello@flowadlytics.com. We will respond within 30 days.

7. Cookies

We use essential cookies that are necessary for the Service to function (such as session management). We may also use analytics cookies to understand how the Service is used. You can manage cookie preferences through your browser settings.

8. International Data Transfers

Your data may be processed in countries outside the UK/EEA where our service providers operate. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or equivalent protections.

9. Children's Privacy

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service. The "Last updated" date at the top of this policy indicates when it was most recently revised.

11. Data Deletion

You can request deletion of your data at any time by:

• Using the "Delete Account" feature in your account Settings
• Disconnecting individual platforms (Meta Ads, Google Sheets) from Settings
• Emailing us at hello@flowadlytics.com

Upon receiving a deletion request, we will revoke all connected platform tokens and delete your stored data within 30 days. Data already delivered to your Google Sheets is not affected — it remains in your Sheets under your control.

12. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: hello@flowadlytics.com