Privacy and Cookie Policy
A summary, not a substitute. The full wording below is what actually applies.
What we collect and why
Account information, so we can create and administer your account, bill you and contact you. That includes names, usernames, email addresses and billing details.
Customer content, meaning whatever your flows send through the platform, including data pulled from services you have connected. We process it to run your automations, and to resolve service, security, support or technical issues.
Usage information, meaning analytics and metadata about how the product performs and which features get used, including workflow structure and configuration. We use it to operate and improve the service.
Lawful basis
We rely on contract for running your account and delivering the service, legitimate interests for product analytics, security and service improvement, consent for optional analytics and advertising cookies and marketing email, and legal obligation for tax and accounting records.
Sharing
We share data with infrastructure and payment providers acting as our processors, and with any third-party service you connect to your account. If you agree to advertising cookies on this website, Meta Platforms Ireland receives your visit through its pixel and acts as a controller in its own right for what it does with it. We do not sell personal data. Where you connect an integration, your account and usage information for that integration may be shared with it, and content may be shared to resolve an issue with it.
International transfers
The cloud service runs from UK and EU data centres. Where a transfer outside the UK or EU is necessary, we rely on adequacy decisions or standard contractual clauses. The self-hosted build removes third-party transfers entirely, since you host and control it.
Retention
We keep account and content data for as long as your account is active, then delete it. Accounts with no login and no active flows for twenty-four months may be marked inactive and deleted along with their data. Billing records are kept for as long as tax law requires.
Your rights
You can ask for a copy of your data, correct it, delete it, receive it in a portable format, restrict or object to processing, and withdraw consent where we relied on it. Email hello@flomation.co. We aim to respond within one month, and you can complain to the ICO if you are unhappy with our response.
Cookies we use
This website and the product handle cookies separately, and ask separately. What follows covers this website; the product asks you again when you sign in.
On this website, nothing is stored until you answer the question at the bottom of the page. If you decline, no cookies are set at all, because the analytics and advertising tags are not loaded rather than loaded and ignored.
If you agree, Google Analytics sets two cookies: _ga and _ga_VPEBBXNVG1. They tell repeat visits apart and hold the state of your visit, so we can count how many people come to the site and which pages they read. Both last up to 400 days, which is the longest a browser will keep a cookie set this way. We have turned off Google's advertising signals and ad personalisation and IP addresses are shortened, so this counts visits rather than building an advertising profile of you.
If you agree, we also load the Meta pixel, which sets _fbp, and _fbc as well if you arrived from a Facebook or Instagram advertisement. Both last up to 90 days. The pixel tells Meta that this browser visited a page on our site, along with the address of the page, your IP address and your browser details, so we can tell which advertisements led to sign-ups and so Meta can show our advertisements to people like you. Meta Platforms Ireland decides how it uses that itself, which makes it a controller alongside us for this. Decline and the pixel is never loaded, so none of it is sent.
Two other things are kept on your device without being cookies. Your answer to the question is kept in local storage, so we do not ask again on your next visit. If you arrived from an advertisement, the campaign details from that link are kept for the rest of your visit, so we can tell which advertisements are worth paying for. Declining clears the campaign details and stops them being kept; the record of your answer stays, because that is what stops us asking you again.
You can change your answer whenever you like, from the Cookie choices link in the footer of any page. Choosing no afterwards removes the analytics and advertising cookies as well as stopping new ones.
In the product, essential cookies keep you signed in and protect the session. These cannot be turned off, because the product does not work without them; the editor session cookie is called flomation-token. Preference cookies remember choices such as a collapsed sidebar.
You can clear or block cookies in your browser at any time. Blocking essential cookies will log you out of the product.
Contact
Flomation Ltd, hello@flomation.co. If you have a data protection question, put "Data protection" in the subject line and it will reach the right person faster.
