Privacy Policy

FlowScore ("FlowScore," "we," "us," or "our") provides onboarding audits. Users upload screenshots of a signup or onboarding flow, and FlowScore analyzes those screens against behavioral-science principles to generate scores, findings, copy suggestions, and reports.

Questions about this policy can be sent to privacy@useflowscore.com.

When you request a scan or interact with FlowScore, we may collect:

• Your email address and basic request metadata, such as upload time, report status, and scan identifiers.
• Screenshots you upload, the order of those screenshots, file metadata, and any URL, product name, or flow name you provide.
• Generated report data, including scores, findings, suggested copy, PDF files, checkout metadata, and report access tokens.
• Payment and checkout metadata from Polar, such as checkout status, product tier, order identifiers, refund status, and the customer email provided at checkout.
• Feedback, issue reports, support messages, page URL, browser user agent, and optional email address when you send feedback.
• Technical information such as IP address, device, browser, logs, API requests, rate-limit events, and analytics events.

Screenshots can contain whatever is visible in your onboarding flow. That may include names, emails, customer data, company data, workspace names, settings, analytics, or other information shown by the product you upload.

You are responsible for making sure you have the right to upload, process, and share anything visible in those screenshots. Avoid uploading sensitive, regulated, or confidential information unless you are authorized to process it through FlowScore and our service providers.

We use information to:

• Provide free scans and paid onboarding audit reports.
• Store uploaded screenshots and generated PDFs so your report can be viewed and delivered.
• Analyze screenshots with AI and generate scores, findings, copy rewrites, and recommendations.
• Process checkout, unlock paid report tiers, issue refunds, and send transactional emails.
• Respond to feedback, debug failed scans, monitor reliability, and improve report quality.
• Prevent abuse, enforce rate limits, protect the service, and comply with legal obligations.

We do not sell personal information. We do not use your uploaded screenshots or report content for cross-site behavioral advertising.

FlowScore uses AI providers to analyze uploaded screenshots and generate report text. To provide those features, we may send relevant inputs such as screenshots, product or flow metadata, screen order, and generated report context to those providers.

AI output can be incomplete or inaccurate. You should review any recommendations before relying on them or shipping changes.

We use service providers to run FlowScore. These may include:

• Supabase for database and backend data storage.
• AWS S3 for private storage of uploaded screenshots and generated report PDFs.
• Azure OpenAI or similar AI providers for report generation and screenshot analysis.
• Polar for checkout, payment events, order metadata, refunds, and customer records.
• Resend for transactional email delivery.
• Upstash Redis or similar providers for rate limiting and abuse prevention.
• Vercel and related infrastructure providers for hosting, analytics, CDN, and application logs.

We may share information only:

• With service providers that help us operate FlowScore.
• When required by law, subpoena, court order, or legal process.
• To protect FlowScore, users, payment providers, or the public from fraud, abuse, security threats, or legal risk.
• In connection with a merger, acquisition, financing, reorganization, or business transfer.
• When you direct us to share information, such as by forwarding a report link or submitting feedback.

We retain data for as long as needed to provide reports, maintain records, secure the service, resolve disputes, comply with legal obligations, and improve reliability.

• Uploaded screenshots and generated reports may be retained while the report remains available.
• Checkout and billing records may be retained as required for accounting, tax, fraud prevention, and payment-provider records.
• Feedback and support messages may be retained so we can respond and improve the product.
• Security logs, analytics, and rate-limiting data may be retained for limited periods for abuse prevention and diagnostics.

Depending on where you live, you may have rights to access, correct, export, delete, object to, or restrict certain processing of your personal information.

Requests can be sent to privacy@useflowscore.com. We may need to verify your identity before completing a request.

We use cookies, local storage, and similar technologies for security, report access, checkout flows, analytics, preferences, and product reliability. We do not use advertising cookies for cross-site behavioral advertising.

FlowScore is not intended for children under 16, and we do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. If we make material changes, we will update the date above and provide notice where appropriate.

Questions about this Privacy Policy can be sent to privacy@useflowscore.com.