Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including but not limited to your name, email address, and any other information you choose to provide.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Send you technical notices and support messages
• Respond to your comments and questions
• Process payments and manage your subscription
• Send you billing-related notifications
• Protect against fraud and abuse

3. Payment Information

Payments are processed through Creem, our third-party payment processor. We do not store or have access to your credit card details, billing address, or other payment information. All payment data is handled directly by Creem in accordance with their privacy policy and PCI-DSS compliance.

We only receive confirmation that a payment was successful along with your billing email and basic transaction information necessary to provide our services.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. Following cancellation of your subscription, we may retain certain information for legal, accounting, or fraud prevention purposes.

We retain only required email metadata for operational and compliance purposes, such as message ID, timestamp, delivery status, and suppression reasons. We do not retain email body content or attachments in Flowmails-managed systems. Metadata may be retained for up to 12 months unless a shorter legal retention period applies or deletion is requested.

5. Cookies and Tracking

We use cookies and similar tracking technologies to track the activity on our service and hold certain information. Cookies are files with small amount of data which may include an anonymous unique identifier.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

6. Third-Party Services

We may use third-party services for:

• Payment Processing: Creem (for subscription billing)
• Cloud Infrastructure: Cloudflare (for worker deployment and email routing)
• Authentication: Supabase (for user authentication)
• Analytics: Service usage analytics

Each third-party service has its own privacy policy addressing how they use such information.

7. Your Rights

Depending on your location, you may have the following rights:

• Access and receive a copy of your personal data
• Rectify inaccurate or incomplete personal data
• Request deletion of your personal data
• Object to or restrict processing of your personal data
• Data portability

To exercise any of these rights, please contact us using the information below.

8. Email Data Ownership and Storage

Important: All email data, including received and sent emails, is stored exclusively in your own Cloudflare Worker infrastructure. Our service acts solely as a configuration and management platform.

We do not store or copy your email content and attachments. Incoming and outgoing payloads are processed directly by your deployed Worker on Cloudflare's infrastructure, which you own and control.

For deliverability and abuse prevention, we may store limited sending metadata in Flowmails systems, including message ID, send timestamp, status, bounce/complaint type, and suppression state.

When you deactivate your account or delete your Worker, all email data is immediately and permanently deleted from Cloudflare's servers. We have no ability to recover or access this data once deleted.

9. SES Event Processing and Suppression

We process AWS SES bounce and complaint events through SNS notifications to enforce suppression rules. Hard bounces and complaints are suppressed immediately. If complaint or bounce thresholds are exceeded, sending can be paused automatically to protect sender reputation.

These controls are part of our anti-abuse and deliverability safeguards and are required for ongoing provider compliance.

10. Data Security

We take reasonable measures to help protect information about you from loss, theft, misuse and unauthorized access, disclosure, alteration, and destruction. All sensitive data is encrypted in transit and at rest.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at:
Email: privacy@flowmails.net
Support: support@flowmails.net
Abuse: abuse@flowmails.net
Postmaster: postmaster@flowmails.net