Privacy Policy

Last Updated: October 16, 2026

At Flowre.io ("we," "us," or "our"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal information and data from third-party integrations — including Google, YouTube, Meta (Facebook, Instagram), Telegram, LinkedIn, Twitter, Pinterest, and TikTok — when you use the Flowre.io platform and services (the "Service").

Flowre.io uses YouTube API Services. By connecting a YouTube channel to Flowre.io, you agree to be bound by the YouTube Terms of Service, and your data is also subject to the Google Privacy Policy. See Section 3 for details.

1. Information We Collect

A. Personal Information You Provide

When you register for an account, subscribe to a plan, or contact our support team, we may collect:

Full name and email address
Billing information. Card payments are processed by Payme (Uzcard, Humo) and Polar (Visa, Mastercard); we never receive your full card number, CVV/CVC, or SMS codes. For Uzcard/Humo subscriptions we store only the encrypted card token issued by Payme, the masked card number, and the expiry date, so we can renew your subscription and show you which card is attached; the card is removed from Payme when the subscription ends. Visa/Mastercard details are entered on Polar's own checkout page and stay with Polar; we only receive the subscription status and plan.
Company name and profile details

B. Information from Third-Party Platform Integrations

To provide our social media management, CRM, and automation services, you may connect your Flowre.io account to the following third-party platforms. When you do so, we collect and process:

Google / YouTube:

Google account profile information (name, email, profile picture) obtained via Google OAuth 2.0
YouTube channel information (channel ID, channel name, channel thumbnail)
OAuth access tokens and refresh tokens required to publish content (YouTube Shorts and videos) on your behalf
We request the following Google OAuth scopes:
- https://www.googleapis.com/auth/youtube.upload — to upload videos and YouTube Shorts to your channel
- https://www.googleapis.com/auth/youtube.readonly — to read your channel information
- https://www.googleapis.com/auth/userinfo.profile — to identify your Google account

Meta (Facebook & Instagram):

Facebook Page and Instagram Business account profile information
OAuth access tokens required to publish posts, stories, and reels on your behalf
Inbound and outbound messages and interactions strictly needed to power automated workflows and CRM features you configure

Telegram:

Bot token and chat/channel identifiers you provide
Message content required to execute your configured chatbot workflows

TikTok:

TikTok account profile information (username, display name, avatar) obtained via TikTok OAuth 2.0 when you connect your TikTok account to Flowre.io
OAuth access tokens and refresh tokens required to publish videos and content to your TikTok account on behalf of Flowre.io users
Post performance metrics (views, likes, comments, shares) for content published through Flowre.io
Flowre.io requests only the minimum permissions necessary to provide the Service
Flowre.io does not access, store, or share your TikTok credentials (password)
TikTok data collected by Flowre.io is used exclusively to provide the scheduling and publishing features you request — never for advertising, resale, or any unrelated purpose
You may revoke Flowre.io's access to your TikTok account at any time from your TikTok account settings

LinkedIn, Twitter/X, Pinterest:

Account profile information and OAuth tokens
Content and media required to publish posts on your behalf

C. Automatically Collected Information

We automatically collect technical data including your IP address, browser type, operating system, and platform usage telemetry (pages visited, features used, session duration) to operate and improve the Service.

2. How We Use Google User Data

We use Google user data solely to provide and improve the features of Flowre.io that you explicitly request. Specifically:

YouTube access tokens are used exclusively to publish videos and YouTube Shorts to your YouTube channel on your behalf, as directed by you.
Google profile information (name, email, profile picture) is used to identify your account and display your connected channel information within the Flowre.io dashboard.
We do not use Google user data for:
- Targeted, personalized, or interest-based advertising
- Selling or transferring data to data brokers or information resellers
- Determining creditworthiness or for lending purposes
- Training AI or machine learning models
- Any purpose unrelated to providing or improving the Flowre.io Service

Our use of data received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. YouTube API Services

Flowre.io uses YouTube API Services to let you connect your YouTube channel and publish videos and YouTube Shorts to it from the Flowre.io dashboard.

A. YouTube Terms and Google Privacy Policy

By connecting your YouTube channel to Flowre.io, you agree to be bound by the YouTube Terms of Service. Data accessed through YouTube API Services is also subject to the Google Privacy Policy.

B. What YouTube Data We Access and Why

When you connect a YouTube channel, Flowre.io accesses, collects, and stores only the following:

Channel information (channel ID, channel name, channel thumbnail) — to show which channel is connected and to let you pick it as a publishing destination.
OAuth access and refresh tokens — to upload the videos and YouTube Shorts you create or schedule in Flowre.io, set their title, description, and custom thumbnail, and keep your connection active without asking you to sign in again.
The ID of each video we publish for you — to link to the published video from your Flowre.io dashboard.

We do not read, download, or store your existing YouTube videos, comments, subscribers, or analytics. We access YouTube data only when you connect a channel or when you publish (or schedule) a post to it.

C. How YouTube Data Is Shared

YouTube data is not sold or shared with third parties. Video files and metadata you choose to publish are sent only to YouTube. Stored tokens and channel information are processed by our infrastructure providers (see Section 5) solely to operate the Service.

D. Storage and Deletion

OAuth tokens are encrypted with AES-256 before being stored. When you disconnect your YouTube channel or delete your Flowre.io account, we delete the stored tokens and channel information. You can also ask us to delete this data at any time by emailing privacy@flowre.io; we will do so within 30 days.

E. Revoking Access

You can revoke Flowre.io's access to your Google account and YouTube channel at any time from the Google security settings page (Google Account → Security → Third-party apps with account access). Once access is revoked, Flowre.io can no longer publish to your channel.

F. Limited Use

Flowre.io's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

We use Google user data only to provide or improve the user-facing features described in this Privacy Policy.
We do not transfer Google user data to others except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to you.
We do not use Google user data to serve advertisements, including retargeting, personalized, or interest-based advertising.
We do not allow humans to read Google user data unless you give us affirmative consent for specific messages, it is necessary for security purposes (such as investigating abuse), it is required to comply with applicable law, or the data has been aggregated and anonymized for internal operations.
We do not use Google user data to develop, improve, or train generalized AI or machine learning models.

4. How We Use Your Information

We use the information we collect to:

Provide, operate, maintain, and improve the core Flowre.io Service
Publish content to your connected social media platforms on your behalf
Execute your configured automated workflows, chatbot logic, and CRM features
Process subscription payments securely
Send technical notices, system updates, security alerts, and support communications
Analyze platform usage to enhance user experience and develop new features
Comply with legal obligations and enforce our Terms of Service

We do not sell your personal data or Google user data to any third party. We share data only in the following limited circumstances:

Service Providers: With vetted third-party vendors who perform services on our behalf (e.g., Payme and Polar for payments, Neon for database hosting, Hetzner for cloud storage). These providers are contractually obligated to protect your data.
Your Connected Platforms: Content and data (such as posts, captions, and media) are transmitted to platforms like YouTube, Facebook, Instagram, Telegram, Pinterest, LinkedIn, and Twitter strictly to execute the publishing and automation actions you configure.
Legal Requirements: If required by law, court order, or lawful request from public authorities.
Business Transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred with prior notice to you.

We do not transfer Google user data to third parties for advertising, resale, or any purpose other than providing the Service.

6. Data Security

We implement industry-standard security measures to protect your personal information and API tokens, including:

Encryption in transit: All data is transmitted over HTTPS/TLS
Encryption at rest: OAuth access tokens and refresh tokens are encrypted using AES-256-CBC before being stored in our database
Access controls: Access to production systems and user data is restricted to authorized personnel only

No internet transmission is completely secure, and while we take all reasonable precautions, we cannot guarantee absolute security.

7. Data Retention and Deletion

We retain your information only for as long as necessary to provide the Service, resolve disputes, and comply with legal obligations.

Connected Account Tokens: If you disconnect a third-party account (e.g., removing your Google/YouTube or Meta connection), we will immediately revoke the OAuth tokens and securely delete them from our systems.
Google User Data: We retain Google OAuth tokens only while your account is actively connected. Upon disconnection or account deletion, all associated Google user data is permanently deleted.
Account Deletion: You may request the deletion of your Flowre.io account and all associated data by contacting us at privacy@flowre.io or using account management tools in the dashboard. We will process your request within 30 days.
Messaging Logs: CRM and messaging data is retained for the duration of your subscription and deleted upon account termination.

8. Your Rights and Choices

Depending on your jurisdiction (including GDPR and CCPA), you have the right to:

Access the personal information we hold about you
Update or correct inaccurate information
Delete your personal data and connected account tokens
Restrict or object to certain data processing activities
Data portability — receive a copy of your data in a machine-readable format
Withdraw consent at any time for data processing based on consent
Revoke platform access directly from the respective platform settings (e.g., Google Account Permissions, Facebook Business Integrations)

To exercise any of these rights, contact us at privacy@flowre.io.

9. Third-Party Platform Compliance

By connecting your accounts to Flowre.io, you agree to comply with the respective platform's terms:

Flowre.io complies with TikTok's Developer Terms and Platform Policies. Flowre.io does not use TikTok user data for any purpose beyond what is explicitly disclosed in this Privacy Policy and approved by TikTok.

10. Children's Privacy

Flowre.io is designed for business and professional use and is not intended for individuals under the age of 18. We do not knowingly collect personal data from children.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable regulations. We will notify you of material changes by posting the revised policy on this page and updating the "Last Updated" date above. Your continued use of the Service after such notice constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us at:

Company: ID SOFT LLC (OOO «ID SOFT»), TIN 311867759 Address: 1 Abdulla Qahhor St., Damariq MFY, Yakkasaray District, Tashkent, Uzbekistan Phone: +998 99 455 12 60 Email: info@idsoft.uz, privacy@flowre.io Website: https://flowre.io