This policy explains what information Flipeet Canvas collects, how we use it, who we share it with, and the choices you have. We collect only what we need to run the Service for you and your team.
1. Information we collect
- Account details: your name, email address and profile picture from Google or the sign-in method you use.
- Workspace content: canvases, comments, reactions, files, images and prompts that you and your teammates create.
- Billing details: plan, seats and billing contact. Card details are handled by our payment provider, Bachs; we do not store full card numbers.
- Usage and device data: pages and features used, approximate location from IP address, browser and device type, and error logs.
2. How we use information
- to provide, secure and improve the Service
- to process AI requests you make
- to send service emails such as invites, receipts and security alerts
- to provide support and prevent abuse
- to send product updates if you opt in; you can unsubscribe at any time
We do not sell your personal information, and we do not use Your Content to train our own AI models.
3. AI providers
When you use built-in AI, the prompt and relevant canvas content are sent to the provider of the model you choose, such as Anthropic, OpenAI or Google, to generate a response. We use their business terms, under which [providers do not train on our API data and retain it only for a limited time]. Confirm these details for each provider before publishing.
4. Your own API keys
If you add your own provider API key, it is encrypted and stored only in your browser on that device. It is sent directly to that provider and never to Flipeet's servers. We cannot see, recover or reset it. Removing the key or signing out deletes it from that device.
7. How long we keep data
We keep your data while your account or workspace is active. If you delete content it is removed from the Service and erased from backups within [30] days. When an account is closed we delete or anonymize personal data within [90] days, unless we must keep some of it longer for legal, tax or security reasons.
8. Security
We protect data with encryption in transit and at rest, access controls, and regular security reviews. No system is perfectly secure, so if we learn of a breach that affects you, we will notify you as the law requires.
9. Your rights and choices
Depending on where you live, you can ask to access, correct, delete or export your personal data, or object to or limit how we use it. You can do much of this in Settings, or email support@flipeet.io. You can also complain to your local data protection authority.
10. International transfers
We may process data in countries other than yours, including [Countries / regions]. Where required, we use safeguards such as standard contractual clauses.
11. Children
The Service is not meant for children under [16]. If you believe a child has given us personal data, contact us and we will delete it.
12. Changes and contact
We will post updates here and tell you about significant changes by email or in the app. The data controller is Flipeet Labs. Contact us at support@flipeet.io.
Questions? Email support@flipeet.io.