FREEFLOW · GUIDE & TRUST
Privacy policy
What this public preview uses, what stays on your device, and how to contact us.
Updated 16 October 2026
About this policy
This policy covers the FreeFlow AI website and its public tool-guidance features. It does not replace the policies of external tools you choose to open. For a privacy question, contact support@freeflowai.app and identify FreeFlow in the subject.
Member access and cookies
Verified access uses a high-entropy member code. The service looks up a hashed code and a private record containing a member identifier, active status, and payment-verification status. A successful sign-in creates a time-limited server session and a secure, HttpOnly cookie, normally lasting 30 days. Member status is rechecked for protected requests; a browser setting is not proof of payment. Access codes and session tokens are not intentionally logged. Paystack processes checkout; verified purchases activate member access. We keep the payment reference, purchase email, amount, currency and necessary verification records. Card details stay with the payment provider.
Messages you send
When you send a chat message, its text, a bounded part of your conversation, and relevant device or budget choices are sent to our server and an AI service provider to prepare a reply. Some requests can use web research. Do not include passwords, payment details, private documents, or other sensitive information that is unnecessary for your request.
Data stored in this browser
Saved tools and plans are stored in local browser storage. A saved plan can include conversation text and your choices. These records are not synced to a cloud account. You can remove saved items in Saved or clear this site’s data in your browser. Clearing browser data, using another browser, or switching devices can make saved items unavailable. Anyone with access to the same browser profile may be able to read them.
Operational and abuse-prevention information
Hosting services process technical request information needed to serve and protect the website. Public-preview controls use a hashed network identifier and usage counters to limit abuse and manage capacity. Application diagnostics can record error stages, model names, and token usage. Our chat code does not intentionally log the contents of your messages. These diagnostics are separate from the plans you choose to save locally.
Service providers and external links
Hosting, AI, storage, and web-research providers process information needed to supply their respective services. These services may process information outside your country. Opening an external tool takes you to that provider, whose own privacy policy, cookies, account rules, and retention practices apply. FreeFlow does not receive your external tool password or inspect the files you create there through this public interface.
Retention and your choices
Locally saved information remains until you delete it or your browser removes it. Operational counters, temporary reply caches, and provider records follow their service purposes and configurations. We do not promise that all technical or provider records disappear when you clear a local plan. Contact support about a privacy request or information you believe we hold. Rights and any exceptions depend on the laws that apply to you.
Changes
We may update this page when the product or its data practices change. The date below identifies this version. If automated payment or public review features are introduced, their data handling will be described before those features are enabled.
Purchase information
We store your purchase email, payment reference, package price, verification status, and private membership records to deliver access and handle billing support. Paystack processes payment details; we do not collect card numbers. A purchase claim token is saved in your browser to finish activation securely. Keep your member access code private. Contact support for access, correction, or deletion requests, subject to necessary billing record retention.
Website visit measurement
We use first-party random browser identifiers to estimate visits and unique browsers. A visit lasts 30 minutes; the browser identifier lasts up to one year. We do not store your IP address, search text, or browsing history in these visit records. Records can include the referring website hostname, a campaign label from the promotion link, and a broad screen-size category (phone, tablet or computer). These are used in aggregate audience reports; reports shared with brands exclude customer emails, payment references and revenue. Counts may include automated traffic. We respect Do Not Track and Global Privacy Control signals. Verified purchase emails and account status are visible only to the owner for account administration.