Privacy Policy

1. Scope

This Policy applies to FlowPrompter websites, desktop and mobile applications, teleprompter tools, account services, AI tools, voice features, support interactions, and related services (collectively, the “Service”). It does not govern third-party websites or services that publish their own privacy policies.

2. Information we collect

Account and identity information

This may include your email address, display name, profile image, internal account identifiers, authentication provider identifiers, and sign-in or account status. If you sign in with Google or Apple, we receive information those providers make available under your settings and authorization.

User Content

We process scripts, titles, prompts, edits, feedback, and other content you choose to create, store, or submit. Cloud-synced scripts are associated with your FlowPrompter account so they can be saved and accessed across supported devices.

Subscription and transaction information

We process plan, price, currency, purchase source, payment status, renewal, cancellation, refund, invoice, and transaction identifiers. Payment providers such as Stripe and Apple process your payment credentials. We do not receive or store your full payment card number.

Usage, device, and diagnostic information

We may collect app version, operating system, language, general device or browser information, IP address when made available to us or our providers, referring page, feature usage, button and page interactions, teleprompter session events, subscription funnel events, crash reports, performance data, and diagnostic logs. Our analytics and error-diagnostics tools may use session replay or similar technology to reconstruct interface interactions for product analysis and troubleshooting.

Communications

We process messages and attachments you send to support, survey responses, refund or cancellation requests, and records of our replies.

3. Voice Follow and microphone data

Voice Follow uses your microphone only after you enable the feature and grant operating system permission. While Voice Follow is active, live audio is streamed to Deepgram for speech recognition so the teleprompter can follow your spoken words. FlowPrompter does not intentionally store the raw microphone audio in its application database. Deepgram may process limited connection and service data under its terms and our service configuration.

4. AI tools

When you use an AI generation, analysis, or editing tool, the prompt and content you submit may be sent through OpenRouter to the selected underlying AI model provider to produce a response. Do not submit highly sensitive, confidential, or regulated information unless you are comfortable with that processing and have authority to do so.

5. How we use information

We use personal information to:

• create and secure accounts and authenticate users;
• save, sync, and deliver scripts and requested product features;
• process purchases, subscriptions, renewals, cancellations, and refunds;
• send sign-in codes, receipts, service notices, and support messages;
• provide Voice Follow and AI-powered features you request;
• measure feature use, improve usability, and develop the Service;
• diagnose crashes, performance problems, abuse, and security incidents;
• prevent fraud, enforce our Terms, and protect users and the Service; and
• comply with accounting, tax, legal, and regulatory obligations.

Where data-protection law requires a legal basis, we rely on performance of our contract, our legitimate interests in operating and securing the Service, consent where required, and compliance with legal obligations. You may withdraw consent at any time where consent is the applicable basis, without affecting earlier lawful processing.

6. How we share information

We do not sell personal information for money. We share information only as reasonably necessary with the following categories of recipients:

• Infrastructure and communications providers that host data, deliver email, or operate technical services, including AWS email services.
• Payments and app stores, including Stripe and Apple, to process and administer transactions and subscriptions.
• Identity providers, including Google and Apple, when you use those sign-in methods.
• Analytics and diagnostics providers, including PostHog and Sentry, to measure use, troubleshoot problems, and improve reliability.
• Speech and AI providers, including Deepgram, OpenRouter, and underlying model providers, when you request those features.
• Professional advisers and authorities when reasonably necessary to comply with law, resolve disputes, prevent harm, or protect legal rights.
• A successor organization in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate safeguards.

These providers may process information only for the services they provide to us, subject to their contracts and applicable law. Some third-party features also create a direct relationship between you and the provider under that provider’s terms.

7. Cookies and local storage

Our website and applications use cookies, local storage, and similar technologies to keep you signed in, remember language and product preferences, protect sessions, operate feature flags, measure usage, and support analytics. You can control cookies through your browser, but blocking essential storage may prevent parts of the Service from working. Browser “Do Not Track” signals are not interpreted consistently across the industry.

8. International data transfers

FlowPrompter and its providers operate in multiple countries. Your information may be processed outside the country where you live. Where required, we use contractual or other recognized safeguards for international transfers and take steps designed to protect the information consistently with this Policy.

9. Retention and account deletion

We retain information for as long as reasonably necessary to provide the Service, maintain security, resolve disputes, enforce agreements, and meet legal, tax, accounting, and audit obligations. Retention depends on the type of information and why it was collected.

When you delete your account, we scrub certain direct account identifiers and deactivate or soft-delete associated scripts in our active product systems. Some information may remain for a limited period in backups, security and diagnostic logs, fraud-prevention records, account-deletion audit records, and payment or webhook records. Transaction records may be retained for legal, accounting, dispute, and tax requirements. Data held by payment providers or app stores is governed by their retention obligations and policies.

10. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including encrypted network transport, access controls, payment processing through established providers, and monitoring for errors and abuse. No system can guarantee absolute security. Please use a secure email account and notify us if you suspect unauthorized access.

11. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of your personal information; receive a portable copy; withdraw consent; or appeal or complain to a data-protection authority. You may delete your account through supported account settings or contact us. We may need to verify your identity before completing a request, and some information may be exempt from deletion where law permits or requires retention.

12. Children

The Service is not directed to children who cannot lawfully consent to the processing of their personal information. If you believe a child provided personal information without valid parental or guardian authorization, contact us so we can investigate and take appropriate action.

13. Changes to this Policy

We may update this Policy as our Service or legal obligations change. We will post the updated Policy with a new effective date and provide additional notice for material changes when required.

14. Contact us