Privacy
The AI-Flow website at www.ai-flow.eu (the "Website") and the AI-Flow App (the "App") are made available by FUNdation. AI-Flow respects your privacy and recognizes your need for appropriate protection and management of your personal information, such as your name and email address. Your personal data is processed by us only in accordance with the provisions of German data privacy laws. Please read this Privacy Policy carefully to understand how your personal information is collected and used by us and check back often for updates. Contact us with any questions you may have by emailing info (at) fundation.one. We're always happy to hear from you.
WHAT INFORMATION DOES ai-flow.eu COLLECT AND HOW?
Website visits
Our Website uses third-party tools (eg., google analytics) that may use cookies to collect anonymous data. We have no control over how third-party tools use cookies.
During a Website visit, you may also elect to provide us personal information, such as your name and contact details, via email, web based forms, or other means.
If you choose to purchase or subscribe to use the App, we will ask you to provide credit card or account information in order to process your order. Our Website does not save your credit card information. We use tokenization to associate payment information to your account. Your credit card information is saved by a third party service provider that we use for credit card processing services and with which we maintain a written agreement to ensure appropriate security and confidentiality measures are in place to safeguard your personal and financial data. We will not authorize the release of your personal or financial information to anyone not directly involved in processing the transaction. This information may be encrypted and stored for logging purposes in accordance with applicable regulatory requirements. Credit card numbers are used only for processing payments and are not used for any other purposes.
The third party service provider that we use to process your payments is Stripe, Inc. (www.stripe.com), and the personal data that you provide relevant to payment processing is subject to Stripe's security and privacy policies. Stripe is a validated Level 1 PCI DSS compliant service. For more information regarding the security of your personal information related to credit card processing, visit http://www.stripe.com/security.
Use of the AI-Flow App
The AI-Flow AI App is an offline and online tool for writing projects. Information that you upload for the purpose of establishing and maintaining a subscription account to use the AI-Flow App may include your name and email. You are responsible for the data that you and users authorized by you input to the App and for the compliance of such data with applicable law, including but not limited to data protection laws.
AI-Flow does not claim ownership to any of your works or content, nor to AI content generated by you or through your input, and will not give any of your data to third parties, neither for commercial nor for any other purposes.
HOW ai-flow.eu USES YOUR PERSONAL INFORMATION
AI-Flow does not sell, trade or rent your personal information to others. We will not disclose your personal information to others without your express permission, other than as set forth in this privacy policy. AI-Flow does not supplement the personal information provided by you with information collected from other sources.
When you choose to provide us your email address, we may use it to reply to a message that you have sent to us. We may also use your email to contact you from time to time regarding updates or enhancements to the AI-Flow App, or to our policies, or to send you other information that we feel may be of interest to you.
We may also release your personal information when we believe release is appropriate to comply with the law or to protect the rights of AI-Flow or others. Your personal information is, of course, subject to disclosure pursuant to judicial or other government subpoenas, warrants or orders.
Use of Google User Data
AI-Flow accesses Google user data through APIs such as Google Drive, Google Sheets, or Gmail only when you choose to connect your Google account and grant the relevant permissions.
We request only the Google scopes that are reasonably necessary for the feature you choose to use. Google user data is used only to provide or improve user-facing functionality that you actively request, such as importing files, reading or writing spreadsheet data, processing email-connected workflows, or performing transformations on content you selected.
Data obtained from your Google account is not sold, rented, or used for advertising. We do not use Google user data to train generalized AI/ML models. Except where required for security, abuse prevention, legal compliance, or support that you request, we do not permit humans to read your Google user data.
When Google user data or derived content must be processed by our systems to provide a requested feature, it is transmitted over encrypted channels and processed on secure infrastructure. Authentication credentials and connection secrets such as OAuth access tokens, refresh tokens, API keys, and passwords are stored separately from general profile or workflow metadata and encrypted at rest using field-level AES-256-GCM encryption.
Access to connected-account data is limited to the authenticated user account, the relevant project context, and service components or subprocessors that need the data to provide the feature you enabled. We also apply measures to reduce unnecessary exposure of secrets, including storing connection credentials in encrypted source records rather than in prompts, chat history, or general API profile documents.
We retain Google connection data only for as long as needed to maintain the feature or integration you enabled, unless a longer retention period is required by law, security obligations, or billing/accounting requirements. You can request deletion of stored personal data and connected-account data by contacting info (at) fundation.one.
Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Third-Party Integrations
In addition to Google, AI-Flow may connect with other third-party platforms such as Microsoft, Dropbox, or Notion. These integrations are used to provide user-requested functionality such as importing or exporting documents, syncing with cloud storage, or enhancing collaboration.
We only access or transmit your data when you authorize a connection. Any third-party data is handled with the same level of care and confidentiality as your local or Google-based data, and only used to perform the features you request within the App.
HOW DOES ai-flow.eu PROTECT YOUR PERSONAL INFORMATION?
Personal information you provide us is stored in a secure third-party database provided by MongoDB Atlas (www.mongodb.com/cloud/atlas). Sensitive connection data such as OAuth access tokens, refresh tokens, passwords, and API keys is encrypted before storage. For AI-Flow connection records, we use field-level AES-256-GCM encryption for these secrets. Data exchanged with our hosted service is protected in transit using HTTPS/TLS, and access to stored data is limited through authenticated account controls and project-level scoping. We also separate authentication secrets from general application documents where possible so credentials are not stored in prompts or ordinary content records. We do our best to keep your data safe from loss, however please make regular offline backups of all your data - we do not guarantee for the content in the case of data loss.
REVIEWING, CHANGING AND DELETING YOUR PERSONAL INFORMATION
At any time, you may review, change and delete information that you input to the AI-Flow App or Website directly by using the tool's functionality. You may also request to view or update the personal information that is associated with your account and stored by AI-Flow. You may also request that we correct or delete some or all personal and/or non-personal information that we have collected about you. We will promptly fulfill your request and provide you confirmation when the information has been corrected or deleted. To request any change or deletion of your personal information, or your entire AI-Flow account, send a request to info (at) fundation.one
REFUND POLICY
AI-Flow is eligible for refunds only in limited cases, for example if you are having issues getting the application to run. To receive a refund, contact us within 14 days of buying/subscribing.
CHANGES IN THIS PRIVACY POLICY
Because the Internet is constantly evolving, so are our policies. By accessing the AI-Flow Website, you agree to the terms of this Privacy Policy as it may be amended from time to time. Any updates to this Privacy Policy will be posted here. It is your responsibility and you agree to check back to view the policy at this Website from time to time. We may also notify you of material changes by sending you an email.
