Privacy Policy

Last updated: August 12, 2026

1. Data Controller

The controller of your personal data is:

DevThinks — Jakub Frydryk
Osiedle Jagiellońskie 18/40
61-228 Poznań, Poland
NIP: 7822950228
Email: contact@flowtent.app

2. What Data We Collect

We collect the following personal data:

Account data: first name, last name, email address, and hashed password — provided during registration.
Usage data: content you create within the application (posts, ideas, scenarios, projects).
Audit data: timestamps and records of actions performed within projects.
Technical data: authentication cookies and anti-forgery tokens required for the application to function.
Waitlist data: if you join the waitlist on flowtent.app, we store your email address, the language you were reading the page in, the time you signed up, and — if you arrived through a link we tagged — the three campaign labels from that link (utm_source, utm_medium, utm_campaign). We write those labels into our own links; they tell us which of our posts worked, and nothing about you. Nothing else — no name, no IP address, and no record of the page you came from.
Connection data: your IP address is processed when you use the site — to limit how often a single source can submit a form, to run the anti-bot check, and in web server and CDN logs kept for security and diagnostics. Those logs are retained for a short period and are not linked to your account or to your waitlist entry.

3. Purpose and Legal Basis

Purpose	Legal basis (GDPR)
Account creation and authentication	Art. 6(1)(b) — performance of a contract
Providing the application features	Art. 6(1)(b) — performance of a contract
Audit logging for data integrity	Art. 6(1)(f) — legitimate interest
Abuse prevention (reCAPTCHA)	Art. 6(1)(f) — legitimate interest
Sending service emails (confirmation, password reset)	Art. 6(1)(b) — performance of a contract
Joining the waitlist and sending you the invitation email	Art. 6(1)(a) — consent
Anti-bot check on the landing page (Cloudflare Turnstile)	Art. 6(1)(f) — legitimate interest
Rate limiting, server and CDN logs (security and diagnostics)	Art. 6(1)(f) — legitimate interest
Landing page visit statistics (Cloudflare Web Analytics — no cookies, no identifiers)	Art. 6(1)(f) — legitimate interest

4. Data Retention

Your personal data is retained for as long as your account is active. If you delete your account, all personal data and associated content will be permanently removed within 30 days. Audit logs related to shared projects may be retained in anonymized form.

Waitlist entries are kept until we have sent your invitation and you have either created an account or told us you are no longer interested, and in any case no longer than 24 months from the day you signed up. You can withdraw your consent at any time by writing to contact@flowtent.app — we delete the entry and stop emailing you. Server and CDN logs containing IP addresses are retained for up to 14 days.

We do not sell your data. We share data only with the following processors:

Hosting provider: OVH Cloud (OVHcloud, SAS) — dedicated server infrastructure. See OVH Privacy Policy.
Google reCAPTCHA: Google Ireland Ltd — for bot protection during registration. See Google Privacy Policy.
Email provider: Google Workspace (Google Ireland Ltd) — for transactional emails. See Google Privacy Policy.
Cloudflare: Cloudflare, Inc. — hosts the flowtent.app landing page, provides the anti-bot check on the waitlist form (Turnstile), collects cookieless visit statistics for the landing page (Web Analytics), and sits in front of the application as a CDN and proxy, which means it processes the IP address of every request. Part of this processing takes place outside the European Economic Area, on the basis of the European Commission's Standard Contractual Clauses. See Cloudflare Privacy Policy.

6. Your Rights

Under the GDPR, you have the right to:

Access your personal data
Rectify inaccurate data (via your Profile page)
Erase your data (“right to be forgotten”)
Restrict processing of your data
Data portability — receive your data in a machine-readable format
Object to processing based on legitimate interest
Lodge a complaint with the Polish supervisory authority: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl

To exercise any of these rights, contact us at contact@flowtent.app. We will respond within 30 days.

7. Cookies

For details on cookies used by Flowtent, see our Cookie Policy.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users via email of any material changes. The “Last updated” date at the top indicates when the policy was last revised.