Privacy Policy
Last updated: March 1, 2026
Plainflow ("we", "us", "our") operates the plainflow.io platform. This policy explains what data we collect, why, and how we protect it.
1. Data We Collect
- Account information — email address provided during waitlist signup or account registration.
- Usage data — pages visited, features used, and session duration. Collected via server logs and analytics to improve the product.
- Payment data — processed entirely by Stripe. We never see or store your full card number.
2. How We Use Your Data
- Provide and maintain the Plainflow service.
- Send transactional emails (account confirmations, service updates).
- Analyse usage patterns to improve features and performance.
- Process payments through Stripe.
We do not sell your personal data to third parties.
3. Legal Basis (GDPR)
We are based in Estonia, EU. We process data under the following legal bases:
- Contract — processing necessary to provide the service you signed up for.
- Legitimate interest — usage analytics to improve the product.
- Consent — marketing emails, if you opt in.
4. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days except where retention is required by law.
5. Your Rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you.
- Request correction or deletion of your data.
- Withdraw consent at any time.
- Request data portability.
- Lodge a complaint with the Estonian Data Protection Inspectorate.
To exercise any of these rights, email us at privacy@plainflow.io.
6. Cookies
We use essential cookies for session management and authentication. No third-party advertising cookies are used.
7. Third-Party Services
8. Security
We use industry-standard measures including encrypted connections (TLS), hashed passwords, and access controls. No system is 100% secure, but we take reasonable steps to protect your data.
9. Changes
We may update this policy from time to time. Material changes will be communicated via email or an in-app notice. Continued use of the service after changes constitutes acceptance.
10. Contact
For privacy-related questions, reach us at privacy@plainflow.io.