Privacy Policy

1. Who we are

FlowHub is a product of Digiably Technology Pvt. Ltd., a company registered in India (CIN: U72200KA2021PTC148923) with offices at Indiqube Edge, Koramangala, Bengaluru 560034. For any privacy-related questions, email privacy@flowhub.dev.

2. Data we collect

We collect three categories of data:

• Account data — name, email, password hash, billing address and GSTIN (if provided). For team workspaces, names and emails of teammates you invite.
• Service data — workflows, executions, credentials, variables and audit logs that you put on FlowHub.
• Telemetry data — anonymised usage stats (button clicks, page views, error events) via PostHog (EU-hosted). Used only to improve the product.

3. How we use data

We use data to:

• Provide and operate the service (run workflows, store backups, deliver webhooks).
• Send transactional emails (login alerts, billing receipts, incident notices).
• Improve the product (analyse aggregated usage patterns, fix bugs).
• Comply with legal obligations (tax records, law enforcement requests with valid process).

4. What we don't do

We never:

• Sell your data to third parties — ever.
• Read the content of your workflows or credentials.
• Share data with advertisers.
• Train AI models on your data.

5. Where data lives

By default, your workspace runs in ap-south-1 (Mumbai). Backups are stored encrypted in the same region. You can also pick ap-southeast-1 (Singapore) or eu-central-1 (Frankfurt) at workspace creation. On Business plans, you can request data residency in any supported region.

6. Sub-processors

We use the following sub-processors to provide the service:

7. Your rights

You can, at any time:

• Export all your data (workflows, executions, audit logs, billing) — one click from settings, or via flowhub export.
• Delete your account — we'll purge all data within 30 days (90 days for backups).
• Correct any personal data via your profile page.
• Object to processing — email privacy@flowhub.dev.

8. Cookies

We use only essential cookies (session token, CSRF token) and PostHog analytics cookies. No advertising cookies, ever. You can disable PostHog from your settings.

9. Data retention

We keep workspace data for as long as your account is active. After cancellation, we keep billing records for 7 years (Indian tax law requirement) and purge everything else within 30 days. Backup copies are purged within 90 days.

10. Security

We use AES-256-GCM encryption at rest, TLS 1.3 in transit, per-workspace encryption keys rotated quarterly, and are SOC2 Type II audited. Credentials you store are encrypted at the workspace level — even our engineers can't read them.

11. International transfers

If you use the eu-central-1 region, your data stays in Frankfurt. If you use ap-south-1 or ap-southeast-1, your data stays in those regions. We don't transfer data across regions unless you explicitly request it (e.g. via Disaster Recovery setup).

12. Changes to this policy

If we make material changes, we'll email all account owners at least 30 days in advance and show an in-app banner. Minor changes (typo fixes, clarifications) will be noted in our changelog.

13. Contact

Questions? Email privacy@flowhub.dev or write to our Grievance Officer at the Bengaluru address above. We respond to all privacy enquiries within 7 days.