Privacy Policy
Last updated: December 28, 2025
At Flow, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our trading journal platform. Please read this policy carefully to understand our practices regarding your personal data.
1. Information We Collect
Account Information
- Email address (for account creation and communication)
- Password (securely hashed, never stored in plain text)
- Account preferences and settings
Trading Data
- Trade entries (symbol, direction, entry/exit prices, P&L)
- Workflow steps and responses
- Notes and journal entries
- Custom presets and templates
Usage Data
- Features accessed and actions taken
- Feature usage and activity patterns
- Login timestamps and session information
- Device and browser information (for security)
2. How We Use Your Information
We use your information to:
- Provide and maintain the Flow platform
- Process your trades and display your analytics
- Send important account and service notifications
- Improve our services based on usage patterns
- Prevent fraud and ensure platform security
3. Data Sharing
We do not sell your personal data. We share data only with:
Supabase
Our database provider, which stores your account and trading data securely.
Workflow Sharing
When you share a workflow, only the workflow structure is shared—never your personal trade data or account information.
4. Data Security
We protect your data through:
- Encryption in transit (HTTPS/TLS) and at rest
- Secure password hashing using industry-standard algorithms
- Row Level Security (RLS) in our database to prevent unauthorized access
- Regular security audits and updates
- Limited employee access to production data
5. Your Rights (GDPR & CCPA)
Depending on your location, you have the following rights:
Right to Access
Request a copy of your personal data
Right to Rectification
Correct inaccurate personal data
Right to Erasure
Request deletion of your account and data via support
Right to Portability
Export your data (available via the Export feature)
To exercise any of these rights, please contact us at the email below.
6. Cookies & Local Storage
We use:
- Essential cookies: Required for authentication and security
- Local storage: To cache data for faster loading and offline access
- Session cookies: To maintain your login state
We do not use third-party tracking cookies or advertising cookies.
7. Data Retention
- Your data is retained as long as your account is active
- You can request account deletion at any time by contacting support, which removes all associated data
- Backups may retain data for up to 30 days after deletion
- We may retain anonymized, aggregated data for analytics
8. International Data Transfers
Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where required.
9. Children’s Privacy
Flow is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the platform. The “Last updated” date at the top indicates when this policy was last revised.
Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at privacy@flowtrading.app