← Back to Flowdeck

Privacy Policy

Effective date: 2026-03-25

1. Introduction

Flowdeck ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, applications, and services (collectively, the "Service"). By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

2. Who We Are

Flowdeck is the data controller responsible for your personal information. For privacy-related inquiries, please contact us at:

3. Information We Collect

We collect several types of information to provide and improve our Service:

3.1 Personal Information

When you register, subscribe, or interact with our Service, we may collect:

  • Name and email address
  • Account credentials (username, password hash)
  • Profile information and preferences
  • Payment and billing information (processed through third-party payment processors)
  • Communication history with our support team

3.2 Financial and Trading Data

If you use portfolio tracking, watchlist, or research features, we may collect:

  • Stock tickers and securities you track or research
  • Watchlists and portfolio compositions you create
  • Investment preferences and risk profiles you provide
  • Trading alerts and notification preferences
  • Generated reports, analyses, and recommendations you request
  • Custom notes and annotations you add to stocks or reports

Note: We do not connect to or access your actual brokerage accounts. All portfolio and trading data is manually entered by you or derived from your interactions with our research tools.

3.3 AI Interaction Data

When you use our AI-powered features (chat, copilot, analysis tools), we collect:

  • Your prompts, questions, and inputs to AI features
  • AI-generated responses and recommendations
  • Conversation history and context
  • Feedback you provide on AI outputs (thumbs up/down, corrections)
  • Usage patterns and feature interactions

Important: Your AI conversation data may be reviewed by our team for quality assurance, support, and service improvement. We do not use your personal prompts or portfolio data to train third-party AI models. See Section 8 for more details.

3.4 Usage and Technical Data

We automatically collect information about your use of the Service:

  • IP address and approximate geographic location
  • Device type, operating system, and browser information
  • Pages visited, features used, and time spent on the Service
  • Referral sources and navigation paths
  • Error logs and diagnostic data
  • Performance metrics and load times

3.5 Cookies and Tracking Technologies

We use cookies, local storage, and similar technologies to enhance your experience. See Section 9 for detailed information about cookies.

4. Sources of Information

We collect information from the following sources:

  • Directly from you: When you register, use features, or contact us
  • Automatically: Through cookies, analytics, and usage tracking
  • Third-party data providers: Market data, news feeds, and financial information services
  • Authentication providers: If you use social login (Google OAuth)
  • Payment processors: Transaction and billing information

5. How We Use Your Information

We use the information we collect for the following purposes:

  • Service Delivery: To provide, maintain, and improve the Service, including personalized stock research, AI analysis, portfolio tracking, and alerts
  • Account Management: To create and manage your account, authenticate access, and maintain your preferences
  • Transaction Processing: To process payments, manage subscriptions, and send billing-related communications
  • Communication: To send you service updates, security alerts, support messages, and respond to your inquiries
  • Marketing: To send promotional content, feature announcements, and newsletters (with your consent where required by law)
  • Personalization: To tailor content, recommendations, and research to your interests and portfolio
  • Analytics: To understand usage patterns, measure feature effectiveness, and improve user experience
  • AI Improvement: To improve our AI models, prompts, and response quality (using aggregated, anonymized data)
  • Security: To detect, prevent, and address fraud, abuse, security vulnerabilities, and technical issues
  • Legal Compliance: To comply with legal obligations, enforce our terms, and protect our rights

6. Lawful Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data based on the following lawful bases:

  • Contract Performance: Processing necessary to provide the Service you requested (account creation, feature access, subscription management)
  • Consent: Where you have given explicit consent for marketing communications, optional cookies, or specific AI features
  • Legitimate Interests: For analytics, service improvement, fraud prevention, and security measures, where not overridden by your rights
  • Legal Obligation: To comply with applicable laws, regulations, and legal processes

You have the right to object to processing based on legitimate interests. See Section 13 for information about your rights.

7. How We Share Your Information

We do not sell your personal information. We may share your information with the following categories of recipients:

7.1 Service Providers and Processors

We share data with third-party vendors who perform services on our behalf:

  • Cloud Hosting: Infrastructure and data storage providers
  • Payment Processing: Stripe and PayPal for payment and subscription management
  • Authentication: Google OAuth for social login
  • AI Model Providers: OpenAI, Anthropic, or other LLM providers for AI features
  • Market Data: Alpha Vantage, Yahoo Finance, and other financial data providers
  • Email Delivery: Transactional and marketing email services
  • Analytics: Usage analytics and monitoring tools
  • Customer Support: Help desk and communication platforms
  • Security: Fraud detection and security monitoring services

A detailed list of subprocessors is available upon request by contacting privacy@flowdeck.biz.

7.2 Business Transfers

If we are involved in a merger, acquisition, bankruptcy, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our Service of any change in ownership or use of your personal information.

7.3 Legal Requirements and Protection

We may disclose your information when required by law or to:

  • Comply with legal obligations, court orders, or government requests
  • Enforce our Terms of Use and other agreements
  • Protect our rights, property, or safety, or that of our users or the public
  • Detect, prevent, or address fraud, security, or technical issues

7.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you for research, analytics, marketing, or other purposes.

8. AI Features and Data Processing

Flowdeck uses artificial intelligence to provide stock analysis, research assistance, and personalized recommendations. Here's how we handle AI-related data:

8.1 What We Collect

  • Your questions, prompts, and inputs to AI chat and copilot features
  • AI-generated responses, analyses, and recommendations
  • Conversation context and history
  • Feedback signals (ratings, corrections, follow-up questions)

8.2 How We Use AI Data

  • To provide contextual, personalized responses to your queries
  • To maintain conversation continuity within a session
  • To improve prompt engineering and response quality
  • For quality assurance and support purposes
  • To develop and refine our AI features

8.3 Third-Party AI Providers

We use third-party AI model providers (such as OpenAI or Anthropic) to power our AI features. When you interact with AI features:

  • Your prompts and context may be sent to these providers for processing
  • These providers process data according to their own privacy policies and terms
  • We have agreements with providers that prohibit them from using your data to train their general models
  • Conversation data is typically processed in real-time and not permanently stored by the AI provider

8.4 Model Training

We do not use your personal prompts, portfolio data, or identifiable information to train third-party AI models. We may use aggregated, anonymized interaction patterns to improve our own prompt templates and feature design.

8.5 Human Review

Our team may review AI conversations for quality assurance, debugging, safety monitoring, and customer support. Access is limited to authorized personnel and subject to confidentiality obligations.

8.6 Automated Decision-Making

Our AI features provide research, analysis, and recommendations but do not make automated decisions with legal or similarly significant effects. All AI outputs are informational only and should not be relied upon as financial advice. You retain full control over your investment decisions.

9. Cookies and Tracking Technologies

We use cookies, local storage, and similar technologies to provide and improve the Service. Here's what we use and why:

9.1 Essential Cookies

Required for the Service to function properly:

  • Authentication and session management
  • Security and fraud prevention
  • Load balancing and performance
  • User preferences and settings

These cookies cannot be disabled without affecting Service functionality.

9.2 Analytics Cookies

Help us understand how users interact with the Service:

  • Page views and navigation patterns
  • Feature usage and engagement metrics
  • Error tracking and performance monitoring
  • A/B testing and optimization

9.3 Advertising Cookies

We do not currently use advertising or marketing cookies from third-party ad networks. If this changes, we will update this policy and provide opt-out controls.

9.4 Managing Cookies

You can control cookies through:

  • Your browser settings (most browsers allow you to refuse or delete cookies)
  • Our cookie preferences (if available in your account settings)
  • Third-party opt-out tools for analytics services

Note: Disabling essential cookies may prevent you from using certain features of the Service.

9.5 Do Not Track

We do not currently respond to "Do Not Track" (DNT) browser signals. We will update this policy if our approach changes.

10. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

10.1 Retention by Data Type

  • Account Data: Retained while your account is active and for up to 90 days after account deletion (unless required for legal or security purposes)
  • Billing Records: Retained for 7 years to comply with tax and accounting regulations
  • Portfolio and Watchlist Data: Retained while your account is active; deleted within 90 days of account deletion
  • AI Conversation History: Retained for up to 12 months for service improvement and support; may be retained longer in anonymized form
  • Support Tickets: Retained for 3 years for quality assurance and legal purposes
  • Analytics and Usage Logs: Retained for up to 24 months; aggregated data may be retained indefinitely
  • Security Logs: Retained for up to 12 months for fraud prevention and security monitoring

10.2 Account Deletion

When you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal, regulatory, security, or fraud prevention purposes.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction.

11.1 Primary Hosting

Our primary infrastructure is hosted in the United States and may utilize cloud services in other regions for redundancy and performance.

11.2 Safeguards for EU/EEA/UK Transfers

For transfers of personal data from the European Economic Area, United Kingdom, or Switzerland to countries without adequate data protection laws, we implement appropriate safeguards, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Data Processing Agreements with service providers
  • Technical and organizational security measures
  • Adequacy decisions where applicable

11.3 AI Provider Locations

Third-party AI model providers may process data in the United States or other jurisdictions. We ensure these providers implement appropriate safeguards for international transfers.

12. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your information from unauthorized access, use, disclosure, alteration, or destruction.

12.1 Security Measures

  • Encryption of data in transit (TLS/SSL) and at rest
  • Secure authentication and password hashing
  • Access controls and role-based permissions
  • Regular security audits and vulnerability assessments
  • Monitoring and logging of security events
  • Incident response and breach notification procedures

12.2 Payment Security

We do not store credit card numbers or payment card details. All payment processing is handled by PCI-DSS compliant third-party processors (Stripe, PayPal). We only store billing addresses and transaction metadata necessary for subscription management.

12.3 Limitations

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

12.4 Security Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law. Notification will be provided via email, account notification, or prominent notice on our Service, depending on the nature and severity of the breach.

13. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

13.1 Rights Under GDPR (EU/EEA/UK)

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following rights:

  • Right of Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data (subject to legal exceptions)
  • Right to Restriction: Limit how we process your data
  • Right to Data Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to processing based on legitimate interests or for direct marketing
  • Right to Withdraw Consent: Withdraw consent for processing based on consent
  • Right to Lodge a Complaint: File a complaint with your local data protection authority

13.2 Rights Under CCPA (California)

If you are a California resident, you have the following rights:

  • Right to Know: Request information about data collection, use, and sharing
  • Right to Delete: Request deletion of your personal information
  • Right to Opt-Out: Opt out of the sale of personal information (we do not sell personal information)
  • Right to Non-Discrimination: Not be discriminated against for exercising your rights

13.3 How to Exercise Your Rights

To exercise any of these rights, please contact us at:

  • Email: privacy@flowdeck.biz
  • Subject Line: "Privacy Rights Request"
  • Include: Your name, email address, and specific request

13.4 Identity Verification

To protect your privacy and security, we will verify your identity before processing rights requests. We may ask you to provide additional information or log in to your account to confirm your identity.

13.5 Response Time

We will respond to your request within 30 days (or as required by applicable law). If we need additional time, we will notify you of the extension and the reason for the delay.

13.6 Limitations and Exceptions

Certain rights may be limited by legal obligations, ongoing investigations, or technical constraints. We will explain any limitations when responding to your request.

13.7 Marketing Opt-Out

You can opt out of marketing communications at any time by:

  • Clicking the "unsubscribe" link in marketing emails
  • Updating your email preferences in your account settings
  • Contacting us at privacy@flowdeck.biz

Note: You will still receive transactional emails related to your account and subscriptions.

14. Complaints and Supervisory Authorities

If you have concerns about how we handle your personal information, please contact us first at privacy@flowdeck.biz. We will investigate and respond to your complaint.

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority:

  • EU/EEA: Contact your national data protection authority (list available at edpb.europa.eu)
  • UK: Information Commissioner's Office (ICO) at ico.org.uk
  • Switzerland: Federal Data Protection and Information Commissioner (FDPIC)

15. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are under 18, please do not use the Service or provide any personal information.

If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information as soon as possible.

If you believe we have collected information from a child under 18, please contact us immediately at privacy@flowdeck.biz.

16. Business Transfers and Corporate Changes

If Flowdeck is involved in a merger, acquisition, bankruptcy, reorganization, partnership, asset sale, or other business transaction, your personal information may be transferred, sold, or assigned as part of that transaction.

In such cases:

  • We will notify you via email and/or prominent notice on the Service before your information is transferred
  • The acquiring entity will be bound by this Privacy Policy or will provide notice of any changes
  • You will have the opportunity to delete your account before the transfer if you do not agree to the new terms
  • Your rights under applicable data protection laws will continue to apply

17. Third-Party Services and Links

The Service may contain links to third-party websites, applications, or services that are not operated by us. We are not responsible for the privacy practices of these third parties.

When you use third-party services through our platform (such as payment processors or authentication providers), their privacy policies and terms apply. We encourage you to review the privacy policies of any third-party services you access.

Key third-party services we integrate with:

18. Financial Services Disclaimer

Flowdeck is a research and information platform, not a financial advisor or broker. The Service provides stock research, analysis, and educational content for informational purposes only.

Regarding your data:

  • We do not access or connect to your actual brokerage accounts
  • Portfolio and watchlist data is manually entered by you
  • We do not execute trades or manage investments on your behalf
  • AI-generated recommendations are informational only and not financial advice
  • We do not share your portfolio data with brokers or trading platforms

Any investment decisions you make are your sole responsibility. See our Terms of Use for complete disclaimers.

19. Automated Profiling and Personalization

We use automated processing to personalize your experience on Flowdeck. This includes:

  • Recommending stocks based on your watchlists and research history
  • Tailoring news and market updates to your interests
  • Customizing AI responses based on your portfolio and preferences
  • Prioritizing content and alerts relevant to your tracked securities

This personalization does not have legal or similarly significant effects. It is designed to improve your research experience, not to make automated decisions about you.

You can reduce personalization by:

  • Clearing your watchlists and portfolio data
  • Using the Service without logging in (limited features)
  • Contacting us to opt out of certain personalization features

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will indicate the effective date of any material changes at the top of this policy.

For material changes that significantly affect your rights or how we use your information:

  • We will notify you via email (if you have provided an email address)
  • We will display a prominent notice on the Service
  • We may require you to acknowledge the updated policy before continuing to use the Service

Your continued use of the Service after the effective date of the revised Privacy Policy constitutes your acceptance of the changes. If you do not agree to the revised policy, you must stop using the Service and may delete your account.

21. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

  • Privacy Inquiries: privacy@flowdeck.biz
  • General Support: Via our contact page
  • Data Protection Officer: Available upon request for GDPR-related matters

When contacting us about privacy matters, please include "Privacy Request" in the subject line and provide sufficient detail for us to understand and respond to your inquiry.

← Back to Flowdeck