FlowWall
FlowWall / Legal

Privacy Policy

Last updated: August 24, 2026

This Privacy Policy explains how FlowWall AI processes personal information when you use our websites, applications, visual workflows, generation tools, APIs, collaboration features, asset library, billing features, and related services (collectively, the “Service”). “FlowWall,” “we,” “us,” and “our” mean the person or entity operating the Service.

This policy should be read with our Terms of Use and Copyright Policy. A feature may present a supplemental notice at the point of collection. If that notice conflicts with this policy for that feature, the supplemental notice controls.

1. Information we collect

Information you provide

We may collect:

  • Account and profile information, such as display name, email address, avatar, authentication identifiers, language, preferences, and workspace membership;
  • Your Content, including prompts, negative prompts, instructions, workflow documents, comments, uploaded images, video, audio, reference files, models, and related metadata;
  • Generated content and history, including Outputs, generation parameters, selected models, seeds, task status, editing history, and saved assets;
  • Communications, including support requests, feedback, reports, survey responses, and messages you send us;
  • Transaction information, including plan, credits, orders, invoices, payment status, and refund history. Full payment-card details are normally collected directly by our payment processor, not stored by FlowWall;
  • Collaboration information, including invitations, roles, permissions, shared workflow activity, and comments; and
  • Information about other people contained in material you submit. You must have authority to provide that information.

Information collected automatically

When you use the Service, we and providers acting for us may collect device and browser type, operating system, IP address, approximate location derived from IP, identifiers, language, referring page, pages and features used, clicks, timestamps, session duration, network and performance data, crash logs, request identifiers, model latency, and security events. We may use cookies, local storage, pixels, and similar technologies for sign-in, preferences, security, analytics, and—where enabled and permitted—marketing.

Information from other sources

We may receive information from identity providers when you use third-party sign-in; payment and fraud-prevention providers; workspace administrators; integrations you connect; public sources; and service providers that help us operate and secure the Service. The information depends on your settings and the authorization screen shown by the third party.

2. AI inputs, uploads, and Outputs

To perform a generation or editing request, the Service processes your prompt, settings, reference media, workflow data, and related technical metadata. Depending on the model or feature you choose, we may transmit this material to one or more third-party AI model providers, compute providers, content-safety providers, or storage and delivery providers. These providers may process data in other countries and are permitted to use it only according to our agreements with them, their applicable service terms, and law.

Do not submit confidential or sensitive personal information unless it is necessary for the feature and you are authorized to do so. Avoid government identifiers, account credentials, payment-card data, health records, precise location, and information about children. If you upload a face, voice, or other identifiable media, you confirm that you have the required permission and lawful basis.

Some face-, voice-, or motion-based features may analyze physical or behavioral characteristics to locate a face, align frames, synthesize speech, or create an effect. Unless a supplemental notice expressly says otherwise, FlowWall does not use these features to identify or authenticate a person. Derived technical data is retained only as reasonably necessary to deliver, secure, and troubleshoot the requested feature.

3. How we use information

We use personal information to:

  • provide, personalize, maintain, and troubleshoot the Service;
  • create accounts, authenticate users, manage workspaces, and synchronize projects;
  • process prompts, uploads, workflows, generations, edits, downloads, and collaboration actions;
  • calculate usage, credits, subscriptions, invoices, refunds, and entitlements;
  • communicate service messages, security alerts, support responses, and product notices;
  • prevent fraud, abuse, infringement, unsafe content, unauthorized access, and violations of our Terms;
  • debug, analyze, and improve reliability, accessibility, performance, model routing, and user experience;
  • develop new features and evaluate models using aggregated, de-identified, or appropriately authorized data;
  • comply with law, enforce agreements, protect rights and safety, and establish or defend legal claims; and
  • send marketing where permitted, subject to your choices.

We do not use private content in public advertising without your consent. Content that you intentionally publish to a public gallery, template page, contest, or showcase may be displayed and promoted as part of that public feature.

Unless we give you a separate notice and choice, we do not use private prompts, private uploads, or private Outputs to train a general-purpose generative model. We may use limited content and metadata to provide the request, detect abuse, evaluate quality, resolve support issues, and improve Service operation. We may use de-identified or aggregated information that cannot reasonably identify you for analytics, research, and product improvement.

4. Legal bases for processing

Where laws such as the GDPR require a legal basis, we rely on:

  • Contract to create and manage your account, process generation requests, provide collaboration and storage, and administer purchases;
  • Legitimate interests to secure and improve the Service, prevent misuse, support users, understand performance, and operate our business, balanced against your rights;
  • Consent for optional cookies, marketing, or a feature that specifically requests consent; and
  • Legal obligation and public interest to meet legal duties, respond to valid process, and protect people, rights, and the Service.

You may withdraw consent at any time for future processing, but withdrawal does not affect processing already lawfully completed.

5. How we disclose information

We may disclose relevant information to:

  • AI model and compute providers that perform generation, editing, moderation, transcription, synthesis, or related processing you request;
  • Infrastructure providers for hosting, databases, object storage, content delivery, monitoring, error reporting, email, and customer support;
  • Payment processors and fraud providers for billing, tax, chargebacks, refunds, and transaction security;
  • Authentication and connected services when you choose third-party sign-in or an integration;
  • Workspace owners, administrators, and collaborators according to workspace permissions and sharing choices;
  • Other users and the public when you publish content or create a public link;
  • Professional advisers and transaction parties for audits, insurance, financing, reorganization, merger, acquisition, sale, or similar business events, subject to appropriate confidentiality;
  • Authorities or affected parties when we reasonably believe disclosure is required by law or necessary to protect rights, safety, security, or the integrity of the Service; and
  • A successor operator if responsibility for the Service is transferred, provided the recipient remains bound by this policy or gives you legally required notice and choices.

We do not sell personal information for money. If advertising or analytics cookies constitute “sale,” “sharing,” or targeted advertising under a particular law, we will provide the required opt-out control.

6. Public and shared content

Public profiles, gallery posts, published templates, public workflow links, comments, and other content you choose to make public can be viewed and copied by others. Search engines and third parties may retain copies after you delete or privatize the original. Do not publish information you want to keep confidential.

Content in a private workspace may be accessible to its owners and administrators. Shared links may be accessible to anyone who possesses the link, depending on the permissions displayed when you create it. Review permissions before sharing.

7. Cookies and your choices

Essential technologies keep you signed in, remember security state, route traffic, and preserve preferences. Analytics technologies help us understand feature use and performance. Advertising technologies, if used, help measure or personalize campaigns.

You can control non-essential cookies through any cookie control we provide and through browser settings. Blocking essential storage may prevent the Service from working. Where required, we honor legally recognized opt-out preference signals, such as Global Privacy Control, for the browser or device that sends the signal.

You may opt out of marketing emails using the unsubscribe link. We may still send transactional, security, billing, or policy messages.

8. Retention

We retain information only for as long as reasonably necessary for the purposes described here, including to provide active accounts and projects, meet user choices, maintain security and backups, comply with accounting or legal obligations, resolve disputes, and enforce agreements.

Retention depends on the type and sensitivity of data, your settings, workspace requirements, the selected provider, and legal duties. Generation task records and temporary processing files may have shorter periods than account, transaction, or security records. Deleted data may remain in restricted backups until the backup cycle expires. We may retain de-identified data and information necessary to prevent fraud or document legal compliance.

When an account is deleted, content will become unavailable through the ordinary Service after processing the request, subject to a short recovery or operational period if disclosed in the account flow. Some information may be retained where required by law, needed to protect the Service, or already made public or shared outside our control.

9. Security

We use reasonable technical, organizational, and administrative safeguards designed to protect personal information, such as access controls, encryption in transit, credential protections, logging, isolation, backups, and vendor review appropriate to risk. No internet service is completely secure, and we cannot guarantee that unauthorized access, loss, or misuse will never occur.

You are responsible for using a strong unique password, protecting authentication methods and shared links, reviewing connected services, and keeping independent copies of important projects and Outputs.

10. International transfers

FlowWall and its providers may process information in countries other than where you live. Those countries may have different privacy laws. Where required, we use recognized safeguards for restricted transfers, such as adequacy decisions, contractual clauses, or another lawful transfer mechanism. You may contact us for information about safeguards relevant to your data.

11. Your privacy rights

Depending on where you live, you may have the right to request access to, correction of, deletion of, or a portable copy of personal information; object to or restrict certain processing; withdraw consent; opt out of targeted advertising or certain sharing; and appeal a denied request. You also may complain to your local data-protection authority.

You can manage some information in account settings. Other requests may be emailed to flowwallai@outlook.com or submitted through the official support or privacy-request channel identified in the Service. We may verify your identity and authority before responding. Authorized agents must provide proof of authority. We will not discriminate against you for exercising a privacy right.

Rights are subject to legal exceptions. For example, we may retain transaction records required by tax law, security records needed to prevent abuse, or information necessary to protect another person’s rights.

12. U.S. state disclosures

For residents of U.S. states with comprehensive privacy laws, the categories collected in the preceding twelve months may include identifiers; customer and transaction records; internet or electronic activity; approximate geolocation; audio, visual, and similar information; inferences based on Service activity; and sensitive information only when you choose to provide it or a feature requires it. Sources, purposes, and recipient categories are described above.

We do not knowingly sell or share for cross-context behavioral advertising the personal information of people under 18. Where applicable, you may opt out of targeted advertising or covered sharing, request access, correction, deletion, or portability, and appeal a decision. We may need to verify requests.

13. European and UK users

If you are in the European Economic Area, Switzerland, or the United Kingdom, the operator of FlowWall is the controller for processing described here unless a supplemental business agreement says otherwise. You have the rights described in Section 11, including to object to processing based on legitimate interests and to lodge a complaint with a supervisory authority.

We do not make decisions producing legal or similarly significant effects based solely on automated processing of your personal information. Content moderation and fraud systems may take automated interim action, but you may request review where required by law.

14. Children

The Service is not directed to children and may be used only by people who satisfy the minimum age in our Terms of Use. We do not knowingly collect personal information from a child in violation of applicable law. If you believe a child has provided information unlawfully, email flowwallai@outlook.com or contact us through the official support channel so we can investigate and take appropriate action.

15. Third-party sites and services

Links, integrations, payment services, model providers, and other third-party services have their own privacy practices. This policy does not govern information a third party processes independently. Review its terms and privacy policy before connecting an account or using the service.

16. Changes to this policy

We may update this Privacy Policy to reflect changes in law, technology, providers, or the Service. We will post the revised policy and update the date above. If a change materially reduces your rights or materially changes how we use personal information, we will provide additional notice or obtain consent when required.

17. Contact

Privacy questions, complaints, and rights requests may be emailed to flowwallai@outlook.com or submitted through the official customer-support, feedback, or privacy-request channel identified in the Service. Include the email associated with your account, the right or issue involved, and enough detail to locate the relevant information. Do not send passwords, full payment-card numbers, or unnecessary sensitive documents.