Privacy Policy

This page says what Flownet collects, what it does with it, and what you can do about it. Flownet shows no ads, uses no tracking or analytics cookies, and does not sell personal information.

1. What we collect

When you only read the site

Nothing that identifies you. Our hosting provider keeps short-lived technical logs of requests, such as the page asked for, the time and the network address it came from.
What you type into Discover is used to run that search. We do not save it in our database, though it is part of the page address and so appears in those short-lived logs.

When you have an account

Account details: your name, handle, email address, and a scrambled (hashed) form of your password. We cannot read your password. The people who run Flownet can see the rest, including your email address, so that they can help you and deal with abuse.
What you write: the text you paste to make a draft, your drafts, and the records you publish, including earlier published versions of a record.
Your invitation: the invite code you signed up with, when you used it, and any note the person who invited you wrote next to it.
Your choices: whether "AI search and citation" is on, and the date and version of the terms you agreed to.
Tracked questions: the questions you add to AI visibility, and the answers and sources recorded for them.
Sign-in and usage counts: a record that you are logged in, a count of failed sign-in attempts, and how many drafts you started today. Failed attempts are stored with the email address that was typed and the network address it came from. These counts are deleted within two days.

2. What is public

Your name, handle, bio and every record you publish are public. Anyone can read them, and search engines can index them. Your profile also shows whether you allow AI assistants to read and cite it.

Your email address, your password, the text you pasted, your unpublished drafts and your tracked questions are never public.

If you unpublish or delete a record, we stop serving it straight away. Copies that search engines, AI services or other people made while it was public are outside our control.

3. How we use it

To run your account and keep it secure.
To draft records from your text, and to publish the ones you approve.
To run the AI visibility checks you set up.
To limit abuse, for example by pausing sign-in after 8 wrong passwords.

We do not use your content to train AI models, and we do not build advertising profiles.

4. Who else handles your data

Cloudflare hosts the site and the database, so everything above is stored on its systems.
Google provides the AI model (Gemini). When you ask for a draft, the text you pasted is sent to Google to write it. When an AI visibility check runs, the question is sent to Google. We ask Google not to store these requests, and Google handles them under its own API terms.

These companies process data in the United States and other countries. We do not share your personal information with anyone else, unless the law requires it.

5. Cookies

Flownet sets one cookie, and only when you log in. It keeps you signed in for up to 30 days and is removed when you log out. There are no advertising or analytics cookies.

6. How long we keep it

Your account and your records are kept until you delete them or close your account.
Deleting a record also deletes its drafts, its claims and its earlier published versions.
Sign-in and usage counts are deleted within two days, and password reset links about a week after they expire.
If we take a record down, or suspend or delete an account, we keep a short note of what was done and why. The note names the handle and stays after the account is gone.
Our hosting provider keeps database backups for a limited time, after which deleted data is gone from them too.

7. Your choices and rights

You can edit your name and bio, and change your password, in Settings.
You can turn "AI search and citation" on or off at any time.
You can unpublish or delete any record yourself.
You can download a copy of everything we hold about you, and you can delete your account and everything in it. Both are in Settings and take effect straight away.
If you cannot log in, or need something corrected that you cannot change yourself, ask us and we will act within 30 days.

Depending on where you live, the law may give you further rights, such as the right to object to how your data is used or to complain to a data protection authority.

8. Security

The site is served over an encrypted connection, passwords are stored only in hashed form, and sign-in is limited after repeated failures. No system is perfectly secure, so use a password you do not use elsewhere.

9. Children

Flownet is for people aged 18 and over. We do not knowingly collect information from children. If you believe a child has made an account, tell us and we will delete it.

10. Changes to this policy

If what we collect or how we use it changes, we will update this page and the date at the top. If the change is significant, we will tell you on the site.

11. Contact

Flownet is in private beta, so for now please contact the person who invited you.