flowyday

Privacy Policy

Last updated: September 2026

This Privacy Policy describes how Flowyday collects, uses, stores and protects the personal data you provide when using our collaborative work-management service.

Data we collect

  • Account information: email address, full name and profile photo when you sign up or are invited to a workspace.
  • Workspace content: boards, tasks, notes, documents, whiteboards, meeting records and chat messages you create or upload.
  • Usage data: browser type, device information, IP address and feature usage logs to help us keep the service reliable.
  • Communication data: email delivery status and support messages when you contact us.

How we use your data

  • To provide, maintain and improve Flowyday boards, tasks, timelines, chat and meeting features.
  • To send account, security and workspace invitation emails through our email provider.
  • To notify you of task assignments, mentions, meeting invites and other in-app activity you choose to receive.
  • To diagnose errors and protect the service from abuse or unauthorized access.

Who we share data with

  • Cloud infrastructure and database services operated by Lovable Cloud to host and store workspace data.
  • Email delivery provider Resend, when sending notifications, invitations or other service emails.
  • Canva, only when a workspace admin chooses to connect the shared team Canva account for whiteboard integration.
  • We do not sell personal data to third parties or use it for unrelated advertising.

Cookies and local storage

  • We use essential cookies and browser local storage to keep you signed in, remember your language preference and preserve UI settings such as column widths.
  • No third-party advertising cookies are used.

Security

  • Access to workspace data is controlled by authentication and row-level security rules.
  • Passwords are never stored in plain text.
  • Canva connection tokens are encrypted before storage and refreshed automatically.

Retention and deletion

  • Active account data is kept for as long as your workspace remains active.
  • Deleted notes, documents and tasks move to the Recycle Bin for 30 days, then are permanently removed.
  • You can request account or data deletion by contacting us at the email below.

Your rights

  • You can update your profile, change your password and manage notification preferences from within the app.
  • You may ask for a copy of your personal data, correction of inaccurate data, or deletion of your account.

Contact us

  • If you have questions about this Privacy Policy or how your data is handled, email us at: privacy@flowyday.com

We may update this policy as Flowyday evolves. Significant changes will be announced in the app or by email.