ExtFlow Privacy & Security Policy

Last updated: November 2025

1. Overview

This Privacy & Security Policy explains how ExtFlow collects, uses, and protects your personal data. We are committed to transparency and security for all users.

2. Data We Collect

We collect the following types of data:

  • Account Data: Email, name, authentication identifiers via BetterAuth.
  • Usage Data: Project metadata, number of nodes, frequency of use, feature engagement.
  • Payment Data: Processed securely via our third-party billing provider (we do not store credit card details).
  • Device Data: Browser type, OS, approximate location (via IP), error logs.

We do not collect or store your project code beyond what is required to run and sync within ExtFlow.

3. How We Use Data

We use your data to:

  • Operate and improve ExtFlow
  • Authenticate and secure access
  • Manage subscriptions and payments
  • Provide support and respond to feedback
  • Analyze feature usage for product development
  • Detect abuse or unauthorized activity

We never sell or rent your personal data to third parties.

4. Data Retention

We retain user data as long as your account is active or as necessary for legal, billing, or operational reasons. Deleted accounts result in anonymized or permanently erased data, except where retention is required by law.

5. Security Measures

  • Encrypted HTTPS communication
  • Passwords managed by BetterAuth (bcrypt or Argon2 hashing)
  • Role-based access control for internal systems
  • Regular audits of database and code
  • Minimal data access for support staff

We take security seriously but cannot guarantee absolute protection against all cyber threats.

6. Cookies and Tracking

We use session cookies and analytics cookies for authentication and usage analysis. You can block cookies in your browser, though some features may not function properly.

7. Data Sharing

We share limited data only with:

  • Payment Processors: For billing and invoicing.
  • Authentication Provider (BetterAuth): For secure login and session management.
  • Analytics Services: For usage statistics, anonymized where possible.

No other external data sharing or advertising integrations exist.

8. User Rights

Depending on your location, you may:

  • Access, correct, or delete your data
  • Request data export
  • Withdraw consent for processing (if applicable)

To exercise these rights, contact us at: privacy@extflow.com

9. Children’s Privacy

ExtFlow is not intended for users under 16. We do not knowingly collect data from minors.

10. Changes to Policy

We may update this Policy to reflect changes in law or service operation. Updates will be posted on our site, and continued use constitutes acceptance.

11. Contact

For privacy or security inquiries contact us on our socials media.
ExtFlow, Switzerland