Privacy Policy
Last updated April 11, 20261. Data Controller
The controller of your personal data is:
DevThinks — Jakub Frydryk
Osiedle Jagiellońskie 18/40,
61-228 Poznań
NIP: 7822950228
Email: [email protected]
2. What Data We Collect
We collect the following personal data:
Account data: first name, last name, email address, and hashed password — provided during registration.
Usage data: content you create within the application (posts, ideas, scenarios, projects).
Audit data: timestamps and records of actions performed within projects.
Technical data: authentication cookies and anti-forgery tokens required for the application to function.
3. Purpose and Legal Basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Account creation and authentication | Art. 6(1)(b) — performance of a contract |
| Providing the application features | Art. 6(1)(b) — performance of a contract |
| Audit logging for data integrity | Art. 6(1)(f) — legitimate interest |
| Abuse prevention (reCAPTCHA) | Art. 6(1)(f) — legitimate interest |
| Sending service emails (confirmation, password reset) | Art. 6(1)(b) — performance of a contract |
4. Data Retention
Your personal data is retained for as long as your account is active. If you delete your account, all personal data and associated content will be permanently removed within 30 days. Audit logs related to shared projects may be retained in anonymized form.
5. Data Sharing
We do not sell your data. We share data only with the following processors:
Hosting provider: OVH Cloud (OVHcloud, SAS) — dedicated server infrastructure. See OVH Privacy Policy.
Google reCAPTCHA: Google Ireland Ltd — for bot protection during registration. See Google Privacy Policy.
Email provider: Google Workspace (Google Ireland Ltd) — for transactional emails. See Google Privacy Policy.
6. Your Rights
Under the GDPR, you have the right to:
Access your personal data
Rectify inaccurate data (via your Profile page)
Erase your data ("right to be forgotten")
Restrict processing of your data
Data portability — receive your data in a machine-readable format
Object to processing based on legitimate interest
Lodge a complaint with the Polish supervisory authority: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
7. Cookies
For details on cookies used by Flowtent, see our Cookie Policy.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users via email of any material changes. The "Last updated" date at the top indicates when the policy was last revised.