Privacy Policy

Effective date: October 25, 2026  |  Last updated: October 29, 2026

Welcome to Flowbit ("Flowbit", "we", "us", or "our"). Flowbit is a workspace and project management platform that helps teams collaborate, manage tasks, track projects, and communicate in real time.

This Privacy Policy describes how we collect, use, store, share, and protect information when you access or use our website at https://flowbit.pages.dev and related services (collectively, the "Service"). By using the Service, you agree to the practices described in this policy.

1. Information We Collect

We collect the following categories of information:

• Account information: When you register or sign in — including via Google or GitHub OAuth — we receive your name, email address, profile picture, and an account identifier from the relevant provider. You may also provide a username and password if you register directly.
• Content you create: Workspace data, project details, task descriptions, messages, uploaded files, documents, meeting notes, comments, attendance records, and other content you submit while using Flowbit features.
• Usage and technical data: Pages visited, features used, browser type, device model, operating system, IP address, time zone, language preference, and general location (city or country level) derived from your IP address.
• Session and authentication data: Login timestamps, session tokens, and security event logs used to keep your account secure.
• Communications: Support messages or feedback you send us directly by email or through in-app channels.

2. Google Account and OAuth Sign-In

Flowbit offers sign-in via Google OAuth. If you choose this option, Google shares with us only the information you authorize on the Google consent screen, which typically includes your name, email address, profile picture, and a Google account identifier. We use this information solely to authenticate you and create or maintain your Flowbit account.

Flowbit does not access your Gmail messages, Google Drive files, Google Calendar events, Google Contacts, or any other Google service beyond what is explicitly listed on the consent screen and described in this policy. If future features require additional Google API scopes, this policy will be updated before those features are made available, and you will be asked to grant permission explicitly.

You can review or revoke Flowbit's access to your Google Account at any time through Google Account → Security → Third-party access. Revoking access will disable Google sign-in for your Flowbit account but will not automatically delete data already stored. Contact us at the address in Section 13 to request deletion.

3. GitHub OAuth Sign-In

Flowbit also offers sign-in via GitHub. If you use this option, GitHub shares your public profile information (name, username, and email address, subject to your GitHub settings) with us. We use this information only to authenticate you and maintain your Flowbit account. We do not access your private repositories, organization data, or any GitHub resource beyond the basic profile needed for authentication.

4. How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your account and authenticate you securely.
• To provide all Flowbit features: workspaces, project management, task tracking, team chat, meetings, documents, attendance, and related tools.
• To save, display, and synchronize the content and data you create within the platform.
• To send transactional and service-related communications (e.g., account confirmations, security alerts, and important service notices). We do not send unsolicited marketing emails.
• To diagnose technical issues, prevent abuse, detect fraud, and maintain platform security and reliability.
• To improve and develop new features based on aggregated, anonymized usage patterns.
• To comply with applicable laws, regulations, and legal obligations.

We do not use your information for advertising, sell your personal data to third parties, or use it for any purpose incompatible with the purposes stated above.

5. Google API Services User Data Policy and Limited Use

Flowbit's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Specifically, Flowbit:

• Uses Google user data only to provide and improve user-facing features that are clearly visible within the Flowbit application.
• Does not use Google user data for serving advertisements of any kind.
• Does not sell or transfer Google user data to third parties except as permitted by the Google API Services User Data Policy — i.e., with your explicit consent, for security purposes, to comply with applicable law, or to authorized service providers where strictly necessary to operate the service.
• Does not use Google user data for training machine-learning models unless the data is fully anonymized and aggregated, and only where permitted by applicable policy.
• Limits its access to the minimum Google API scopes required to provide the service.

6. Data Storage and Retention

Flowbit's backend services are hosted on cloud infrastructure. Your data is stored in secure databases and object-storage services. We retain your information for as long as your account is active and for a reasonable period thereafter to resolve disputes, maintain security, and meet legal obligations.

When you request deletion of your account and data, we will remove your personal information within 30 days, except where retention is required by law or necessary to resolve an outstanding dispute or enforce our agreements. Aggregated, anonymized data that cannot identify you may be retained indefinitely for analytics purposes.

7. Sharing Your Information

We do not sell personal information. We may share information in the following limited circumstances:

• Within your workspace: Content you create (tasks, messages, documents, meeting notes) is visible to other authorized members of your workspace or team, as intended by the collaborative nature of the platform.
• Service providers: We engage trusted third-party providers for hosting, database management, authentication, email delivery, error monitoring, and similar infrastructure services. These providers access your data only as needed to perform services on our behalf and are bound by appropriate confidentiality and data protection obligations.
• Legal requirements: We may disclose information if required to do so by law, court order, or valid governmental authority, or where we believe disclosure is necessary to protect the rights, property, or safety of Flowbit, our users, or the public.
• Business transfers: If Flowbit is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

8. Security

We implement industry-standard technical and organizational measures to protect your information, including encrypted data transmission (HTTPS/TLS), hashed password storage, access controls, and regular security reviews. However, no method of transmission over the internet or method of electronic storage is 100% secure. We encourage you to use a strong, unique password and to enable any available multi-factor authentication options.

If you discover a potential security vulnerability, please contact us promptly at the address in Section 13 so we can investigate and address it.

9. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data. To do this, email us from the address associated with your account. We will process your request within 30 days.
• Portability: Request a machine-readable export of your data where technically feasible.
• Objection / Restriction: Object to or request restriction of certain processing activities, subject to applicable law.
• Withdraw consent: Where processing is based on your consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email us at privacy@flowbit.app. We will respond within 30 days and may need to verify your identity before acting on your request.

10. Cookies and Local Storage

Flowbit uses cookies and browser local storage for the following purposes:

• Authentication: To keep you logged in and maintain a secure session across pages.
• Preferences: To remember settings such as dark/light mode and language selection.
• Security: To protect against cross-site request forgery and similar attacks.

We do not currently use third-party advertising cookies or behavioral tracking cookies. If we introduce optional analytics cookies in the future, we will obtain your consent where required and update this policy.

11. Children's Privacy

Flowbit is designed for use by individuals aged 13 and older and is intended as a professional workspace tool for teams and businesses. We do not knowingly collect personal information from children under the age of 13. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at the address in Section 13 and we will promptly delete such information.

12. International Data Transfers

Flowbit may process and store your data on servers located outside your country of residence. By using the Service, you consent to the transfer and processing of your information in countries that may have different data protection laws than your country. Where required by applicable law, we will implement appropriate safeguards — such as standard contractual clauses — for cross-border data transfers.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via email or a prominent notice within the Service. Your continued use of the Service after any changes take effect constitutes your acceptance of the revised policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how Flowbit handles your personal information, please contact us:

• Email: privacy@flowbit.app
• Website: https://flowbit.pages.dev

We will respond to all privacy-related inquiries within 30 days of receipt.