This policy explains what data FlowDesk ("we", "us") collects, why, and the choices you have. We aim to collect only what's needed to run the product, and we never sell your data.
When you use AI features, the text you submit is sent to our model provider (Anthropic) to return a structured result. It is processed transiently to fulfil your request. If you supply your own API key (BYOK), your AI requests use that key under your provider's terms.
We share data only with vendors that help us operate FlowDesk, under contract:
We do not sell personal data or share it for advertising.
We keep your data while your account is active. You can export your tasks (CSV) and edit or delete your content at any time in the app. To delete your account and associated data, contact us. Depending on your location, you may have rights to access, correct, port, or erase your data.
Data is protected with encryption in transit, row-level security isolating each workspace, scoped and rate-limited API keys for agents, and a tamper-evident audit trail. Sensitive secrets (e.g., a stored AI key) are encrypted at rest and never returned to the browser. No system is perfectly secure, but we work to protect your data.
Our providers may process data in regions outside your own. We rely on their compliance frameworks and contractual safeguards for such transfers.
FlowDesk is not directed to children under 16 and we do not knowingly collect their data.
We may update this policy; material changes will be reflected by the effective date above and, where appropriate, notified in-app.
Questions or requests: agents@flowdesk.app.