Privacy Policy

1. Information We Collect

We collect information you provide directly:

• Email address — used for authentication (Magic Link) and purchase receipts
• Payment information — processed by Lemon Squeezy (we never store card details)
• Capability submissions — JSON files and descriptions provided by authors

2. How We Use Your Information

• Provide access to purchased capabilities
• Send transactional emails (purchase confirmation, magic links)
• Process author payouts through Lemon Squeezy
• Improve our platform and user experience

3. Third-Party Services

We use the following third-party services:

• Supabase — database and authentication
• Lemon Squeezy — payment processing and merchant of record
• Vercel — hosting and serverless functions
• Resend — transactional emails
• Anthropic (Claude) — AI-powered capability review

Each service has its own privacy policy. We recommend reviewing them.

4. Data Security

We implement industry-standard security measures including:

• All data transmitted via HTTPS
• Row Level Security (RLS) in Supabase
• No storage of payment card information
• Webhook signature verification for all API integrations

5. Data Retention

We retain your data for as long as your account is active. You can request deletion of your data at any time by contacting support@flowstash.com.

6. Your Rights

You have the right to:

• Access your personal data
• Request correction or deletion of your data
• Opt out of marketing communications
• Request a copy of your data in a portable format

7. Cookies

We use essential cookies for authentication only. We do not use tracking or advertising cookies.

8. Contact

For privacy-related questions, contact us at support@flowstash.com.