1. Introduction & Commitment to Your Privacy
At FlowUltra (FlowUltra.in), we believe that your creative concepts, visual prompts, and personal data deserve uncompromising protection. We operate under strict principles of data minimization, transparent processing, and enterprise-grade cryptographic isolation. This Privacy Policy details how we collect, handle, protect, and retain your data when you use our website, extensions, and AI proxy services.
2. Categories of Information We Collect
To provide our cloud services and maintain security, we collect only the minimum necessary data:
- Account Credentials: When you register, we store your username, email address, password hash (salted and hashed using industry-standard bcrypt), and account creation timestamp.
- Subscription & Token Telemetry: Records of Payment Tokens redeemed, plan tier, total and remaining AI credits, and expiration timestamps.
- Technical Connection Logs: IP addresses, browser user-agent, operating system, and extension handshake timestamps used strictly for rate-limiting, load balancing, and anti-abuse defense.
- No Financial Payment Data: We NEVER store, process, or have access to raw credit card numbers, CVVs, debit card PINs, or UPI PINs. All billing is handled through verified external payment tokens.
- No External Web Tracking: Our browser extension operates strictly on authorized domains (
flowultra.inandflow.google.com). It does NOT inspect, monitor, or track your general browsing history, personal tabs, or background web activity. - No Device Hardware Probing: We do not access your webcam, microphone, or local filesystem without explicit user interaction (e.g. user-initiated file upload for image-to-video generation).
4. Creative Prompts & Workspace Isolation
4.1. Private Isolated Workspaces: Your creative studio sessions are strictly isolated into distinct user sandboxes. Prompts, reference images, and rendered videos generated under your account (e.g. project IDs fa2914a8...) are not shared, visible, or accessible to other creators on the platform.
4.2. Zero Model Training: FlowUltra does NOT use your private creative prompts, concept notes, or generated visual assets to train, fine-tune, or improve public AI models.
4.3. Prompt Confidentiality: Your prompts and ideas are your proprietary creative assets. Our team does not inspect your prompts unless explicitly requested by you for technical troubleshooting.
5. VPS Proxy Encryption & Cookie Protection
5.1. Server-Side Cookie Shielding: Enterprise Google Flow cookies and session tokens injected into our proxy nodes are managed securely on the server backend. Plaintext session cookies are never transmitted to client browsers, preventing session hijacking or credential exposure.
5.2. End-to-End TLS 1.3: All communications between your client browser extension, our web portal, and our VPS proxy nodes are encrypted with modern TLS 1.3 / HTTPS protocols.
6. Cookies & Local Storage
6.1. Session Cookies: We use strictly essential session cookies to maintain your authenticated login state while you navigate the studio dashboard.
6.2. Local Storage: We use browser localStorage solely to preserve your visual theme preference (Dark/Light mode) and client token handshake state. We do not place third-party advertising cookies or tracking beacons on your browser.
7. Data Sharing & Third-Party Disclosures
7.1. No Sale of Personal Data: We do not sell, rent, monetize, or trade your personal data or creative work to third-party advertisers, data aggregators, or marketing companies.
7.2. Legal Compliance: We may disclose information only when strictly mandated by valid legal process, such as a formal court order or lawful inquiry issued by authorized law enforcement agencies under applicable Indian jurisdiction.
8. Data Retention & Permanent Deletion Rights
8.1. Retention: Your account profile, plan status, and project metadata are maintained as long as your account remains active.
8.2. Right to Erasure (Data Purge): You have the absolute right to request permanent deletion of your account and all associated project records. Simply email support@flowultra.in from your registered email address. Account deletion requests are completed within 7 business days.
8.3. Automated Log Pruning: Transient server proxy connection logs and network telemetry are automatically purged on a rolling 30-day schedule.
9. Data Security Safeguards
We implement multi-layered technical and physical safeguards, including automated web application firewalls (WAF), rate-limiting algorithms, bcrypt password encryption, and isolated cloud nodes to protect against data breaches, unauthorized access, and alteration.
10. Contacting Our Data Protection Officer (DPO)
If you have any questions, concerns, or inquiries regarding your data rights or this Privacy Policy, please reach out to our privacy desk:
• Data Protection Officer: FlowUltra Privacy Team
• Email: privacy@flowultra.in / support@flowultra.in
• Location: Cyber City, Gurugram, Haryana, India
• Turnaround Time: Inquiries are acknowledged within 24 hours.