Legal

Privacy Policy

Last updated: 30 August 2026

This policy explains what personal data Flownato ("we", "us") collects, why, and the choices you have. We keep it deliberately short and plain.

1. What we collect

Accounts: Google account email, display name, profile image, and your onboarding preferences. Google verifies your identity; we do not receive or store your Google password.
Access and billing: membership status, referral redemptions, and the Razorpay subscription, payment, plan, currency, status, and billing-period identifiers needed to provide access and support. Razorpay processes payment credentials; we do not receive or store your full card number, CVV, or UPI PIN.
Usage: Mixpanel records page and feature events automatically when analytics is configured. It uses a browser identifier and, after sign-in, our internal user identifier to help us understand product usage. Autocapture excludes element and input text, and Google authentication is excluded. We do not send search text, screenshots, Google credentials, or access tokens to Mixpanel, we disable IP-based city, region, and country enrichment, and session replay is disabled.
Figma transfers: when you create an export, we retain your user identifier, the selected Flownato resource identifiers, an immutable export manifest, a cryptographic digest of the temporary token, its expiry, and access and completion metadata. We do not store the raw transfer token. The plugin does not read or upload content already present in your Figma file.

2. What we use it for

To run the service: signing you in, remembering your preferences, managing access, and understanding which parts of the library are useful. We do not sell or rent personal data, and we don't run third-party advertising.

3. Processors and where data lives

Data is stored with established cloud infrastructure providers, with our primary database hosted in India. Razorpay processes payments and Mixpanel processes the limited analytics data described above. When you explicitly import a transfer, the selected reference images and their source metadata are added to your Figma file and are then handled under your agreement with Figma. Access is restricted and all data is encrypted in transit.

4. Service messages

We may send essential account or service messages. Any optional email will include a clear way to unsubscribe.

5. Your rights

You can ask us at any time to show, correct, or delete the personal data we hold about you, or to close your account. Write to support@flownato.com and we'll act within 7 days. This policy is intended to meet India's Digital Personal Data Protection Act, 2023; the same contact serves as our grievance channel.

6. Cookies and local storage

We use no advertising cookies. The site remembers your signed-in session and Mixpanel's analytics identifier in browser storage. Mixpanel respects a supported browser Do Not Track setting. You can also block site storage in your browser or write to us to exercise your privacy rights.

7. Children

The service is not directed at children under 18, and we don't knowingly collect their data.

8. Changes

If this policy changes materially, we'll say so on the site or by email.