Privacy Policy

Last updated: 2026-11-02

This policy explains what personal data we process when you use Flowhush, and why. The controller is FOP Vakhula Bohdan Yaroslavovych (ФОП Вахула Богдан Ярославович), a sole proprietor located in Dubliany, Lviv Oblast, Ukraine ("we"). Contact: support@flowhush.com.

Data we collect

• Account data: your email address, plan, and timestamps of sign-in.
• Waitlist: if you join the waitlist, your email address and the date you joined, used only to tell you when sign-ups open. Ask us to remove it at any time.
• Monitoring data: monitor names and settings; for each ping its time, type, HTTP method, user-agent, body size and the first 1 KB of the body. We keep the last 50 pings per monitor.
• Alert channel data: email addresses, Slack/Discord webhook URLs and Telegram bot tokens/chat IDs you add.
• Billing data: Creem customer and subscription identifiers and subscription status. Card details are collected and processed by Creem, not by us.
• Technical logs: our hosting provider (Cloudflare) processes IP addresses and request metadata to deliver and secure the Service.

Why we use it

To provide the Service (contract), to send sign-in links and alerts, to bill you (contract/legal obligation), and to keep the Service secure (legitimate interest). We do not sell personal data or use it for advertising. We do not use third-party analytics or advertising cookies; we set one strictly necessary session cookie when you sign in.

Processors

• Cloudflare (hosting, database)
• Resend (transactional email)
• Creem — merchant of record; processes payments, taxes and invoicing as an independent controller for the transaction data it collects (see Creem's privacy policy)
• Slack, Discord, Telegram — only when you configure them as alert channels

Retention

Ping history is capped as described above. Account data is kept while your account is active and deleted within 30 days of an account-deletion request, except records we must keep for legal or tax reasons.

Your rights

You can request access, correction, export or deletion of your data, or object to processing, by emailing support@flowhush.com. You may also complain to the Ukrainian Parliament Commissioner for Human Rights (the data-protection supervisory authority in Ukraine) or to the data-protection authority of your country of residence.

Security

Sign-in links are single-use and expire after 15 minutes; session and sign-in tokens are stored only as hashes. Data is transmitted over HTTPS.

Changes

We will post changes here and notify you of material changes by email.