Privacy Policy

Last updated: March 12, 2026

1. Overview

Flow Proof LLC ("we", "us", or "our") operates the Flow Proof platform at flowproof.io. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service.

2. Information We Collect

Account Information

Email address (required for account creation)
Name (if provided)
Password (hashed, never stored in plain text)

Usage Data

Pages visited and features used within the platform
Watchlist symbols and scanner preferences
Paper trade entries (educational, not real trades)
AI analysis requests

Technical Data

IP address and approximate location
Browser type and operating system
Device information
Cookies and similar tracking technologies

Payment Information

Payment processing is handled by Stripe. We do not store your credit card number, CVV, or full payment details on our servers. Stripe's privacy policy governs the handling of your payment information.

3. How We Use Your Information

To provide, maintain, and improve the Service
To process subscriptions and payments
To send account-related communications (password resets, billing notices)
To personalize your experience (saved watchlists, preferences)
To analyze usage patterns and improve our tools
To prevent fraud and enforce our Terms of Service

We do NOT sell your personal information to third parties. We do NOT use your data for targeted advertising.

4. Data Sharing

We share your information only in these limited circumstances:

Service providers: Supabase (database/authentication), Stripe (payments), Vercel (hosting), and Anthropic/OpenAI (AI analysis). These providers process data on our behalf under strict contractual obligations.
Legal requirements: If required by law, subpoena, or government request.
Business transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users.

5. AI-Generated Analysis

When you request AI analysis, we send market data (stock symbols, prices, options data) to AI providers (Anthropic, OpenAI) to generate educational trade analysis. We do NOT send your personal information, account details, or trading history to AI providers. AI-generated content is for educational purposes only.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).

Cached market data (scanner results, AI analysis) is retained for platform performance and may be anonymized and retained for analytics purposes.

7. Data Security

We implement industry-standard security measures including:

Encryption in transit (TLS/HTTPS) and at rest
Hashed passwords (never stored in plain text)
Role-based access controls
Regular security reviews

No system is 100% secure. While we take reasonable measures to protect your data, we cannot guarantee absolute security.

8. Cookies

We use essential cookies for authentication and session management. We use Vercel Analytics for anonymous, privacy-friendly usage analytics (no personal data is collected by analytics). We do not use third-party advertising cookies.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Correct inaccurate personal data
Delete your account and associated data
Export your data in a portable format
Opt out of non-essential communications

To exercise any of these rights, contact us at privacy@flowproof.io.

10. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request deletion. We do not sell personal information. Contact us to exercise your CCPA rights.

11. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or notice on the Service. The "Last updated" date at the top reflects the most recent revision.

13. Contact Us

For privacy-related questions or requests:
privacy@flowproof.io

Flow Proof LLC
Washington, United States