LEGAL

Privacy and Cookie Policy

How we handle personal data and what we store in your browser. Flomation Ltd is the controller for the cloud service.
IN PLAIN ENGLISH

A summary, not a substitute. The full wording below is what actually applies.

THE QUESTION
THE SHORT ANSWER
What do you collect?
Account information such as name, email and billing details; the content your flows process; and usage analytics about how the product is used.
Do you sell my data?
No.
Where is it stored?
UK or EU data centres on AWS. Self-hosting keeps it entirely on your own infrastructure.
Do you train AI on my content?
Only on de-identified derived data, and you can opt out by emailing support@flomation.co. Higher-tier plans are opted out automatically.
What cookies do you set?
On this website, none at all unless you agree to analytics. In the product, a session cookie so you stay logged in and a preference cookie for things like a collapsed sidebar.
How long do you keep it?
For as long as your account is active. Accounts dormant for twenty-four months may be deleted along with their data.
What are my rights?
Access, correction, deletion, portability, restriction and objection. Email hello@flomation.co and we will respond within one month.

What we collect and why

Account information, so we can create and administer your account, bill you and contact you. That includes names, usernames, email addresses and billing details.

Customer content, meaning whatever your flows send through the platform, including data pulled from services you have connected. We process it to run your automations, and to resolve service, security, support or technical issues.

Usage information, meaning analytics and metadata about how the product performs and which features get used, including workflow structure and configuration. We use it to operate and improve the service.

Lawful basis

We rely on contract for running your account and delivering the service, legitimate interests for product analytics, security and service improvement, consent for optional analytics cookies and marketing email, and legal obligation for tax and accounting records.

Sharing

We share data with infrastructure and payment providers acting as our processors, and with any third-party service you connect to your account. We do not sell personal data. Where you connect an integration, your account and usage information for that integration may be shared with it, and content may be shared to resolve an issue with it.

International transfers

The cloud service runs from UK and EU data centres. Where a transfer outside the UK or EU is necessary, we rely on adequacy decisions or standard contractual clauses. The self-hosted build removes third-party transfers entirely, since you host and control it.

Retention

We keep account and content data for as long as your account is active, then delete it. Accounts with no login and no active flows for twenty-four months may be marked inactive and deleted along with their data. Billing records are kept for as long as tax law requires.

Your rights

You can ask for a copy of your data, correct it, delete it, receive it in a portable format, restrict or object to processing, and withdraw consent where we relied on it. Email hello@flomation.co. We aim to respond within one month, and you can complain to the ICO if you are unhappy with our response.

Cookies we use

This website and the product handle cookies separately, and ask separately. What follows covers this website; the product asks you again when you sign in.

On this website, nothing is stored until you answer the question at the bottom of the page. If you decline, no cookies are set at all, because the analytics tag is not loaded rather than loaded and ignored.

If you agree, Google Analytics sets two cookies: _ga and _ga_VPEBBXNVG1. They tell repeat visits apart and hold the state of your visit, so we can count how many people come to the site and which pages they read. Both last up to 400 days, which is the longest a browser will keep a cookie set this way. We have turned off Google's advertising signals and ad personalisation and IP addresses are shortened, so this counts visits rather than building an advertising profile of you.

Two other things are kept on your device without being cookies. Your answer to the question is kept in local storage, so we do not ask again on your next visit. If you arrived from an advertisement, the campaign details from that link are kept for the rest of your visit, so we can tell which advertisements are worth paying for. Declining clears the campaign details and stops them being kept; the record of your answer stays, because that is what stops us asking you again.

You can change your answer whenever you like, from the Cookie choices link in the footer of any page. Choosing no afterwards removes the analytics cookies as well as stopping new ones.

In the product, essential cookies keep you signed in and protect the session. These cannot be turned off, because the product does not work without them; the editor session cookie is called flomation-token. Preference cookies remember choices such as a collapsed sidebar.

You can clear or block cookies in your browser at any time. Blocking essential cookies will log you out of the product.

Contact

Flomation Ltd, hello@flomation.co. If you have a data protection question, put "Data protection" in the subject line and it will reach the right person faster.

← All policies