Privacy Policy

1. Introduction

FlowScrape Technologies Inc. ("FlowScrape", "we", "us", or "our") provides an automated social media content discovery, scheduling, and publishing platform. This Privacy Policy describes how we collect, process, store, and protect your information when you use our website, dashboard, and related services.

2. Information We Collect

Account Information: When you register an account, we collect your name, email address, hashed password, and workspace preferences.

Social Account & OAuth Information: When you connect social channels (such as Facebook Pages or Instagram accounts), we receive standard platform identifiers, account handles, channel display names, and OAuth access tokens. We do not receive, solicit, or store your personal social media passwords.

Content & Media: We process public content URLs, media images, videos, and post captions that you instruct the platform to discover, curate, or stage for publishing.

Payment Information: All payment transactions are handled by PCI-DSS compliant billing gateways (e.g., Stripe, Razorpay, Cashfree, Lemon Squeezy, Paddle). FlowScrape never stores complete credit card numbers or security CVV codes on our servers.

3. How We Use Your Information

We use your information strictly to provide, maintain, and enhance our services, including:

• Operating automated discovery and 24-hour multi-slot post scheduling.
• Dispatching approved posts to your connected social channels.
• Generating cryptographic fingerprints (SHA-256) to prevent accidental duplicate posts.
• Processing subscription billing, receipts, and account usage allocations.
• Sending transactional system notifications, publishing failure alerts, and password resets.

4. Storage & Third-Party Infrastructure

Cloud Storage: Media assets collected for scheduled posts are stored temporarily in secure Amazon S3 or compatible object storage buckets using time-limited pre-signed URLs with private bucket access.

Email Deliveries: System notifications and transactional receipts are delivered via trusted cloud email providers (such as AWS Simple Email Service or Resend).

Social Platform APIs: When publishing content, data is transmitted to the official APIs of Facebook, Instagram, or other designated networks in strict adherence to their respective platform terms.

5. Data Retention & Deletion

We retain account data for as long as your workspace remains active. You have the right at any time to request complete deletion of your account, connected tokens, and stored media files by submitting a request via our Data Deletion portal.

6. Security Practices

We enforce multi-tenant database isolation, HTTP-only secure session cookies, AES-256-GCM encryption for stored API tokens, rate limiting, and cryptographic webhook signature verification across all external integrations.

8. Public Content Discovery & Copyright Responsibilities

FlowScrape enables users to discover, research, and organize trending public topics from supported online networks. We do not harvest private, non-public personal information, bypass paywalls, or circumvent authentication controls.

Discovering public trends or topics through FlowScrape does not transfer intellectual property ownership or grant permission to copy or republish copyrighted materials. Users act as independent data controllers and are strictly responsible for ensuring that all URLs, media, and captions they import, schedule, or publish comply with applicable laws, third-party platform terms, and copyright requirements. See our Acceptable Use Policy for full compliance rules.

9. Contact Information

If you have any questions or privacy concerns regarding this policy, please contact our Data Protection team at [email protected].