Privacy Policy | Flow AI Fx

Effective Date: March 30, 2026

Flow AI Fx ("we", "us", or "our") operates the multimodal generative AI platform located at flowaifx.app (the "Site" or "Services"). We are deeply committed to protecting your privacy and ensuring transparency regarding how your Personal Data and creative materials are collected, processed, and safeguarded.

"Personal Data" refers to any information relating to an identified or identifiable natural person.

1. Information We Collect

To enable you to access the creative studio and generate AI videos, images, music, and voices, we collect information that you directly provide to us, as well as data gathered automatically during your use of the platform.

A. Generative Studio Data (Inputs and Outputs)

Prompts & Generation Directives: We collect the text descriptions, scripts, camera instructions, motion parameters, negative prompts, and style tags you input to instruct our generation models.
Reference Media: We collect images, video clips, background audio files, and voice audio samples that you upload as source references for model steering, video extensions, or voice synthesis.
Generated Assets: We store the rendered videos, photorealistic images, dynamic music tracks, and synthetic voice files produced by our processing pipelines, along with corresponding preview thumbnails and job logs.

Our Foundational AI Privacy Guarantee:
Flow AI Fx does NOT use your private uploaded reference media or your private generated assets to train public foundation AI models, nor do we sell or license your creative files to external parties without your explicit consent.

B. Account and Profile Information

Registration Details: When you register through Google OAuth or email, we collect your verified email address, account name, profile avatar URL, and internal account identifier.
Authentication Tokens: We securely generate and store cryptographic session tokens to keep you logged in safely across sessions.

C. Financial and Billing Information

When you purchase subscriptions or credit refills, financial transactions are processed directly by our authorized, PCI-DSS certified payment processors (such as Stripe, Creem, or Waffo).
Flow AI Fx does not store or have direct access to your complete payment card numbers or bank credentials. We retain only transactional metadata, including order IDs, transaction timestamps, payment amounts, billing country, and subscription status for accounting and invoice verification.

D. User Communications

When you contact us via support@flowaifx.app or submit bug reports, we collect your correspondence, attachments, and diagnostic notes to resolve issues, prevent fraud, and improve customer experience.

E. Data Collected Automatically

Whenever you navigate or interact with our Services, our edge servers automatically log technical metadata, including:

Network & Device Telemetry: IP address, browser type and version, language settings, operating system, and geographic region.
Platform Usage Analytics: Generation volume, tool modes utilized (Video, Image, Music, Voice), credits consumed, task duration, feature adoption, and error logs.
Cookies & Local Storage: We use essential and preference cookies to manage sessions and settings. For comprehensive details, please refer to our Cookie Policy.

2. Purposes of Data Processing

We process your information for the following specific purposes:

Service Delivery & Cloud Rendering: Managing cloud GPU/TPU rendering queues, executing multimodal AI synthesis pipelines, and delivering output files to your workspace library.
Account Administration: Registering your profile, authenticating user sessions, managing credit allocations, and facilitating account recovery.
Transaction Execution & Accounting: Processing subscription renewals, issuing invoices, verifying payment legitimacy, and maintaining mandatory tax records.
Platform Performance & Latency Optimization: Analyzing de-identified, aggregated usage telemetry to optimize edge caching (via Cloudflare Workers, KV, and R2) and enhance model response times.
Customer Support & Troubleshooting: Diagnosing rendering errors, answering inquiries, and assisting with credit restoration for failed tasks.
Safety, Abuse Prevention & Policy Enforcement: Analyzing input prompts and media hashes using automated safety filters to prevent child sexual abuse material (CSAM), non-consensual deepfakes, copyright infringement, and system attacks.
Marketing & Updates: Sending critical service announcements and product update newsletters (from which you can unsubscribe at any time via the one-click opt-out link in every marketing email).
Legal & Regulatory Compliance: Fulfilling statutory record-keeping duties and cooperating with lawful government investigations where strictly required by law.

If you are an individual located in the European Economic Area (EEA), the United Kingdom, or Switzerland, our legal bases for processing your Personal Data include:

Performance of a Contract (Art. 6(1)(b) GDPR): Processing is necessary to deliver the creative generation services, manage your account, and fulfill subscription commitments.
Legitimate Interests (Art. 6(1)(f) GDPR): Processing is based on our legitimate commercial interests in securing our infrastructure, preventing fraud and abusive generations, and improving platform reliability.
Compliance with Legal Obligations (Art. 6(1)(c) GDPR): Processing is necessary to adhere to statutory accounting, tax, and legal requirements.
Consent (Art. 6(1)(a) GDPR): Where required by applicable law, we seek your explicit consent before setting optional analytics cookies or showcasing your creations in promotional campaigns.

We do not sell, rent, or trade your Personal Data. We share information only with trusted third parties under strict confidentiality and security agreements, strictly as outlined below:

Infrastructure and Storage Providers: Cloudflare (Workers, R2 storage, D1 database, KV cache) for secure global hosting, asset delivery, and distributed data storage.
Payment Processing Gateways: Stripe, Creem, and Waffo to securely process credit purchases, subscriptions, and recurring invoices.
AI Inference Model Providers: Secure cloud inference endpoints that execute generative models strictly under stateless processing agreements without retaining your data for model training.
Transactional Communications: Cloudflare Email and Resend to dispatch account verification links, password resets, and critical operational alerts.
Legal Mandates & Protection of Rights: When compelled by valid legal processes (such as court orders or enforceable subpoenas), or when necessary to protect the physical safety of individuals or mitigate immediate security threats.
Aggregated & Anonymized Analytics: We may publish or share high-level, non-identifying aggregated metrics (such as total community videos rendered) for technical benchmarks or public retrospectives.

Depending on your jurisdiction, you may exercise the following rights regarding your Personal Data:

Right of Access: You may request confirmation of whether we process your data and obtain a portable copy of the Personal Data we hold.
Right to Rectification: You may request corrections to any inaccurate or incomplete personal records.
Right to Erasure ("Right to be Forgotten"): You may request that we delete your account and personal records, subject to statutory retention obligations (e.g., tax logs).
Right to Restriction of Processing: You may request that we temporarily suspend the processing of your data under specific contested circumstances.
Right to Data Portability: You may request your account information in a structured, machine-readable format.
Right to Object & Opt-Out: You may object to data processing grounded in legitimate interests or opt out of direct promotional marketing at any time.

To exercise any of these rights, please contact our privacy compliance desk at support@flowaifx.app. We will respond within thirty (30) days in accordance with applicable laws.

6. Data Security and Retention

Flow AI Fx implements rigorous technical and organizational safeguards to protect your data against unauthorized access, loss, or alteration:

Encryption: All web traffic is encrypted using modern TLS/HTTPS protocols in transit. Static assets and database records are encrypted at rest.
Access Controls: Strict role-based permissions and multi-factor authentication are enforced for internal administrative access.
Generation Cache Retention: Intermediate rendering files, preview frames, and temporary processing buffers are retained on Cloudflare R2 storage according to our standard generation retention schedule (typically thirty (30) days), after which they may be purged to manage storage capacity. You are encouraged to save important creations to your persistent library or download them locally.
Account Data Retention: We retain your account profile and library data for as long as your account remains active. Upon verified account deletion, your personal data will be erased or irreversibly anonymized within thirty (30) days, except where legal retention obligations apply.

7. Cookies and Tracking Technologies

We use cookies and browser storage technologies to maintain secure sessions, remember your theme and language preferences, and monitor performance. For detailed information on the specific cookies we employ and instructions on how to manage them, please review our Cookie Policy.

8. International Data Transfers

Our cloud services and edge network are distributed globally via Cloudflare's server infrastructure. When Personal Data is transferred across international boundaries, we ensure that adequate protection standards (such as standard contractual clauses and robust encryption) are maintained.

9. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect technological changes, new platform features, or updated legal requirements. Any modifications will be posted directly on this page with an updated "Effective Date". For significant changes, we will provide additional notice through in-app alerts or email.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:

Flow AI Fx Privacy Team
Website: https://flowaifx.app
Email: support@flowaifx.app