Privacy Policy

You provide: Email (via magic link), billing details (processed by Stripe), brand materials (logos, images, PDFs, fonts), prompts, campaign goals, and budget settings.

We collect automatically: IP address, browser user agent, URL parameters (utm_*, gclid, fbclid), anonymous ID (localStorage), session ID (sessionStorage), and usage data. No third-party analytics or tracking cookies are used.

We use your data to provide the service, process payments, send transactional emails, generate AI-powered marketing content (via OpenRouter), conduct market research, and attribute conversions. Each purpose has a legal basis under GDPR: contract performance, legitimate interest, consent, or legal obligation.

We share data only with services necessary to operate: payment processing (Stripe), AI inference (OpenRouter), email delivery, cloud hosting (IONOS, Berlin, Germany), and search engines for research. We do not sell your data. When you connect ad platforms (Google Ads, Meta, TikTok, LinkedIn, X, etc.), data is shared only as necessary to execute your campaigns.

When you connect Google Ads, Flow²Market uses Google OAuth to access your Google account only after you authorize it. We request the minimum scopes needed to manage campaigns and read performance for accounts you own: Google Ads account access and basic profile information (email, name) for sign-in.

We use this data solely to provide the service you request: listing your ad accounts, creating and managing campaigns you approve, and reporting performance in your dashboard. We store OAuth tokens encrypted, do not sell Google user data, and do not use it for advertising or unrelated purposes. You can disconnect Google at any time in the app, which revokes our access to new data from that account.

Flow²Market's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

When you connect Meta (Facebook/Instagram ads), Flow²Market uses Facebook Login for Business to access your Meta account only after you authorize it. We request permissions needed to manage ads on accounts and Pages you own: business_management, ads_read, ads_management, pages_show_list, pages_manage_ads, and public_profile (name and profile for the connected-account display).

We use this data solely to provide the service you request: listing your ad accounts and Facebook Pages, associating a Page with ad creatives, creating and managing campaigns you approve (new campaigns default to paused), and reporting performance in your dashboard. We store OAuth tokens encrypted (AES-256-GCM), do not sell Meta user data, and do not use it for advertising or unrelated purposes.

Meta Platform Data is processed on infrastructure hosted by IONOS SE (Berlin, Germany). Encrypted app traffic is routed via Cloudflare Tunnel; Cloudflare does not store Meta Platform Data at rest. You can disconnect Meta at any time in the app, or revoke access in your Facebook settings. We also honor Meta's deauthorize callback at app.flow2market.cc/api/platforms/meta/deauthorize, which clears stored tokens for your account.

Flow²Market's use of information received from Meta APIs adheres to the Meta Platform Terms and applicable Developer Policies.

Your prompts and brand materials are processed by AI models through OpenRouter. We do not train our own models on your data. Your data is not used to improve third-party AI models unless you explicitly opt in.

We retain your data while your account is active and for 30 days after deletion. Billing records are kept for 7 years (Dutch tax law). Usage logs are retained for 12 months.

Flow²Market uses AI to autonomously generate creatives, allocate budgets, and optimize campaigns. You retain control and can review or override decisions. Contact us to contest any automated decision.

Under GDPR, you have the right to access, rectify, delete, port, and restrict processing of your data. To exercise these rights, email legal@flow2market.cc. You may also lodge a complaint with the Autoriteit Persoonsgegevens (ap.nl).

Huisman Web3
Eerste Goudsbloemdwarsstraat 14 3, 1015JW Amsterdam, Netherlands
KVK 86087053 · VAT NL213628211B03
legal@flow2market.cc