Skip to content
Flowpane

Legal

Privacy notice

How Flowpane handles personal information across this website and the service, including cookies, automated assistance and your choices.

On this page

Website and service information

Who to contact
Flowpane is responsible for the personal information it uses for website enquiries, account administration and its own service operations. For privacy questions or data requests, use the contact form. Where we process customer material on a customer's instructions, the applicable customer agreement and DPA define the processing roles.
Service information
The service processes account and organisation details, membership and access information, site identifiers and verification details, governance observations and results, and related records or material you submit. Public website evidence may contain personal information. Submit only what you are authorised to provide and what the task requires.
Purposes and lawful bases
We use information to respond to enquiries, administer agreed access, provide and secure the service, investigate misuse and meet legal obligations. Depending on the activity, the basis is performance of a contract, steps you request before a contract, our legitimate interests in operating and protecting the service, a legal obligation, or consent where required. Optional newsletter subscriptions and optional browser tracking have their own choices below.
Recipients and transfers
Relevant information may be processed by contracted hosting, storage, authentication, communications, security, analytics and automated-processing services. Authorised organisation or workspace members may see information shared within their permissions. We may also disclose information where lawfully required. Processing may take place outside your country, including in the United States. Where required, appropriate transfer arrangements must apply; request the current recipients and safeguards for your intended use through the contact form. A region label does not itself guarantee residency.
Retention
Website chat, newsletter and analytics retention is described below. Other enquiry, account and service records are retained according to their purpose, applicable service arrangements and legal obligations. Backups, security records and evidence retention may follow different periods. Request the relevant schedule before submitting data with special retention requirements; no single deletion period is promised for every data type.
Your rights
Subject to applicable law, you may request access, correction or erasure, object to processing or request restriction or portability. You may withdraw consent without affecting earlier lawful processing. We may need proportionate identity verification, and some information must be retained for legitimate or legal reasons. Where your client or organisation controls the data, contact that controller first; we can assist under the applicable processing agreement.
Concerns and complaints
Tell us through the contact form so we can investigate. You may also complain to the relevant data protection authority, including the UK Information Commissioner's Office where UK data protection law applies. Changes to material processing will be communicated as required; this notice does not authorise a new undisclosed use of personal information.

See our AI and ML declaration and Data Processing Agreement. For requests, use the contact form.

Cookieless analytics

Our own analytics counts visits without cookies or browser storage. Analytics records do not store your raw IP address; they may include a pseudonymous visitor hash. If your browser sends Global Privacy Control or Do Not Track, your visit is counted without that hash.

Optional cookies only with consent

Google Analytics and Microsoft Clarity load only if you accept optional cookies in the cookie banner. Rejecting is as easy as accepting, and you can change your choice at any time.

Forms stay separate

Anything you submit here, such as a startup application, is stored in a dedicated marketing database, apart from the Flowpane product. With it we keep the page you sent it from, the first page of your visit, any UTM tags and the name of the site that linked to you, never the full address. If you use the Flowpane app, your account and usage data from it may be linked to these records for account management, and never for advertising. Messages you send us and our replies may be machine-translated by a contracted processing service to support communication, not for advertising. Enquiries sent from the chat assistant are stored with other enquiries.

Cookies on this site

Essential and functional cookies are set by this site, and fp_id only if you ask to be remembered. The others are set by the services named, and only after you accept them.

  • fp_consent

    Remembers your cookie choices, so we do not ask again on every page.

    Set by
    Flowpane (this site)
    Category
    Essential
    Lasts
    180 days
  • fp_theme

    Remembers the colour theme you picked. Only set if you choose a theme.

    Set by
    Flowpane (this site)
    Category
    Functional
    Lasts
    12 months
  • fp_locale

    Remembers the language you picked in the language switcher, or by accepting the suggestion to read a page in your language. Only set if you choose one, and never used to redirect you. If you close that suggestion instead, this browser remembers it in its own storage, not in a cookie.

    Set by
    Flowpane (this site)
    Category
    Functional
    Lasts
    12 months
  • fp_thanks

    Set only when you send a form, so the confirmation page can show a few of your details back to you, such as your first name. Encrypted, and readable only by this site.

    Set by
    Flowpane (this site)
    Category
    Functional
    Lasts
    30 minutes
  • fp_id

    Only if you tick Remember me on a form, or turn on Personalisation in the cookie settings, and then send us a form: a random code that lets this device recognise you, so forms fill in your details and pages greet you. It holds no personal data, is never used for advertising and is never shared. Forget me removes it.

    Set by
    Flowpane (this site)
    Category
    Personalisation (with your consent)
    Lasts
    180 days
  • fp_press_session

    Keeps you signed in to the press room. Only set if you sign in there.

    Set by
    Flowpane (this site)
    Category
    Essential
    Lasts
    Up to 14 days
  • fp_staff

    Set only in browsers authorised to access Flowpane's workbench, so those visits are left out of analytics.

    Set by
    Flowpane (this site)
    Category
    Essential
    Lasts
    1 year
  • fp_chat

    Keeps an open chat conversation while you move between pages. Session storage, not a cookie, and only set after you send a message in the chat.

    Set by
    Flowpane (this site)
    Category
    Essential
    Lasts
    Until you close the tab
  • fp_chat_preview

    Only in browsers authorised by Flowpane to try the chat before it is switched on for everyone.

    Set by
    Flowpane (this site)
    Category
    Essential
    Lasts
    12 hours
  • _ga

    Distinguishes one visitor from another for Google Analytics.

    Set by
    Google Analytics
    Category
    Analytics
    Lasts
    2 years
  • _ga_T858Y1XS2F

    Keeps session state for Google Analytics.

    Set by
    Google Analytics
    Category
    Analytics
    Lasts
    2 years
  • _clck

    Keeps the Clarity user ID and preferences for this site.

    Set by
    Microsoft Clarity
    Category
    Analytics
    Lasts
    1 year
  • _clsk

    Joins several page views into one Clarity session.

    Set by
    Microsoft Clarity
    Category
    Analytics
    Lasts
    1 day
  • CLID

    Identifies the first time Clarity saw this browser on any site that uses Clarity.

    Set by
    Microsoft Clarity (clarity.ms)
    Category
    Analytics
    Lasts
    1 year
  • ANONCHK

    Checks whether the Microsoft user ID is passed to advertising.

    Set by
    Microsoft (c.clarity.ms)
    Category
    Analytics
    Lasts
    10 minutes
  • MUID

    Identifies unique browsers across Microsoft sites.

    Set by
    Microsoft (bing.com)
    Category
    Analytics
    Lasts
    1 year
  • MR

    Indicates whether to refresh the MUID.

    Set by
    Microsoft (c.bing.com)
    Category
    Analytics
    Lasts
    7 days
  • SM

    Synchronises the MUID across Microsoft domains.

    Set by
    Microsoft (c.clarity.ms)
    Category
    Analytics
    Lasts
    Session

What our own analytics records

Our own analytics uses no cookies or browser storage. It records the limited information below, including a pseudonymous visitor hash rather than your raw IP address:

  • The page path, without any query string, and any utm_source, utm_medium and utm_campaign tags in the link you followed.
  • The name of the site that linked to us, never the full address.
  • Your country, as reported by our network provider, never your IP address.
  • Device type from the width of your screen, and your browser family, such as Firefox.
  • Clicks on our calls to action, such as Join the beta, and on links that leave this site, and page speed measurements (Core Web Vitals).
  • A pseudonymous visitor hash made from your IP address, your browser and a random value that changes every day. The random value is deleted after two days; the raw IP address is not stored in these analytics records.

Bots are ignored. These records are deleted after 400 days. Daily totals made from them, such as page views per page or per country, are kept for longer: they are counts only, with no visitor hash, and cannot identify anyone.

Remember me on this device

What it is
Optional, and off unless you turn it on: tick Remember me on this device on a form, or turn on Personalisation in the cookie settings. Once you have sent us a form, this device recognises you. Forms fill in your details, pages greet you by name, and if you applied for the beta you can see where your application stands.
What is stored
In your browser, one cookie, fp_id: a random code with no personal data in it, for 180 days. With us, only a one-way hash of that code, linked to your contact record, with the browser family (such as Firefox on Windows, never the full browser string or your IP address), when it was set and last used, and what you sent from this device: your name, company, the host name of your website, your role and number of sites, and the topics you asked for.
What is shown
Only what you sent us from this device, and how the things you started there are going, such as your beta application. Your email address is shown masked, such as s•••@example.com, and filled in only when you press Continue as. Nothing you told us from another device or by email is shown, so typing someone else's address into a form reveals nothing about them.
Never for advertising
Never used for advertising, never shared with anyone, and never sent to Google Analytics, Microsoft Clarity or any other service. It is separate from the analytics and marketing cookies: turning those on or off does not change it.
Genuine enquiries only
We only remember people we treat as genuine enquiries. A form our checks flag as spam never sets it. If we later mark one of your submissions as spam, every device is forgotten at once and we stop recognising you. You can also ask us, through the contact form, to forget every device.
Forgetting
Press Forget me, in the site footer, in the greeting or beside any form, or turn Personalisation off in the cookie settings. The cookie is removed and the link is revoked on our side straight away. A link expires 180 days after it was last used, and a revoked or expired link is deleted 90 days later.
Consent record
We record each time you turn it on or off: where, when, the exact wording you saw, and a one-way keyed hash of your IP address. If you turn it on in the cookie settings before sending any form, that record has no name attached; when a later form links the device, it is recorded again with your contact. If your details are erased, your devices are forgotten and the record is kept only in anonymous form.

Chat assistant

Purpose
To answer questions about Flowpane from the pages of this site and the product documentation at docs.flowpane.com and, if you choose, to pass your enquiry to Flowpane.
Who processes it
Answers are generated by an automated AI assistant. A contracted service provider processes the messages and relevant website context on our behalf to provide the response. Processing may take place in the United States. Provider processing, retention and any applicable restrictions on training are governed by the arrangements for the service in use; ask through the contact form for current details. The assistant is identified as AI, not a person.
What we keep
Your messages and the answers, the page you asked from, any rating you give, and a one-way keyed hash of your IP address, used to limit abuse. Email addresses, phone numbers, card numbers and similar details are removed from your messages before they are sent to the provider or stored.
Lawful basis
Our legitimate interest in answering the questions you ask, and in checking that the answers are accurate and safe.
Retention
Flowpane keeps chat messages for 30 days, then deletes them. An answer flagged for review is kept up to 90 days. If you leave a message from the chat, the conversation is kept with your enquiry. A service provider may also retain submitted material under the applicable processing terms, including for abuse or safety review. Request current provider retention details before submitting material with special handling requirements.
Talking to a person
If you ask for a person, the chat asks for your name and email address, which we use only to reply to you; they are kept with the conversation for 30 days, or with your enquiry. Someone from Flowpane may then join the chat and sees the conversation so far. Messages from then on go to Flowpane, not to an AI model, and are stored as you write them, for 30 days. If you write in another language, your messages and the person's replies are machine-translated by our translation provider, with email addresses and phone numbers held back. If nobody is available, you can leave a message, which is sent as an enquiry with your name and email address and kept with our other enquiries.
Support
Help with your account is in the app's helpdesk. The assistant only links to it and passes nothing to the app.
In your browser
The chat sets no cookies. After your first message it keeps a reference to the conversation in your browser's session storage (fp_chat), so the conversation continues as you move between pages, until you close the tab.
Your choices
The assistant is optional, and every form on this site works without it. To ask about or erase a conversation, use the contact form.

Newsletter and product updates

Topics
Two, and you choose each one separately: the Newsletter, occasional articles on keeping public files true, and Product updates, release notes and beta news. The footer and the newsletter page subscribe you to the Newsletter; the updates box on the beta form subscribes you to Product updates. We send them only if you ask.
Lawful basis
Your consent, given for each topic. You give it by confirming from the email we send, which names the topics you asked for; until you confirm, nothing else is sent. Coming back after unsubscribing from everything needs a new confirmation too.
How consent is recorded
For each topic: which topic, the exact wording you agreed to, where you agreed (such as the footer form), when, and a one-way keyed hash of your IP address, never the address itself. Every later change, such as leaving a topic or unsubscribing, is added to a log that is never edited, so we can show how and when you agreed and withdrew.
Managing your preferences
Every email has a Manage preferences link and a one-click Unsubscribe link, with no sign-in, and works with the unsubscribe button in email apps that show one. On the email preferences page you can switch topics on and off, unsubscribe from everything, or ask for a new link by email. You can also ask there for a copy of your data or for its deletion; a person handles both and replies within one month.
Retention
While you are subscribed. A confirmation link lasts 7 days, and a request nobody confirms is deleted after 30 days, with the contact record too if it was made only for that request. When you unsubscribe we stop straight away and keep a record of it, so you are not emailed again by mistake. If we erase your details, your consent log is kept only in anonymous form.
Suppression
If an email to you bounces permanently, if you mark one of our emails as spam, or if you ask us never to email you, your address goes on a suppression list and gets no marketing email, whatever else is on record. After a spam report we also stop automatic acknowledgements. If your details are erased, the suppression is kept only as a one-way keyed hash of your address, so it still works without us keeping the address.
Manage your email preferences
Ask about Flowpane