Legal
Privacy policy
Last updated: October 14, 2026
1. What we collect
Four things. Account data: your email address, the organization you belong to and your role in it. Usage data: sign-in codes, sessions, IP address, an audit record of actions that change something, and analytics about how the website and the product are used, including session recordings (see section 10). Content: the files, catalog data and images you upload, and the messages you send to other users through the product. Setup help requests: the name, company and email address you give us, and what you tell us about your inventory.
2. Why we hold it
To run the service you asked for, to keep accounts secure and abuse detectable, to bill subscriptions, and to send the emails the product needs to send. Where the law requires a legal basis, ours is the contract with you for the service itself, our legitimate interest in security and fraud prevention, and your consent for anything promotional.
3. Sign-in codes and sessions
There are no passwords. Sign-in codes are stored hashed and kept for seven days, because that record is the only way to investigate a disputed sign-in. Sessions that have ended are kept for thirty days so that a question like which device was signed out and when can still be answered, then deleted.
4. Email
Some emails are not optional: sign-in codes, invitations, a notice when your login address is changed, and decisions on an application. They are the only out-of-band signal that something is happening on your account. Everything else — product and marketing email — follows the preferences in your settings, and switching one off means it is not sent.
5. Images and watermarking
Images you upload are stored and resized, and every derivative at 480 pixels or larger carries an invisible watermark so a picture that turns up elsewhere can be traced back. The watermark identifies the source of the image, not the person viewing it.
6. Who else sees it
Other users see exactly what you published to them, and nothing else — which organization a record belongs to is part of every database query, not a setting. We use a small number of processors to operate the service: email delivery, object storage for uploaded files and images, product analytics (PostHog, in the United States), payment processing for subscriptions, and hosting. We do not sell personal data and we do not share it for advertising.
7. Where it is processed
The service runs in the United States, so data you send us is processed there. If you are in a jurisdiction that restricts transfers, that is the transfer you are agreeing to when you use the service.
8. How long we keep it
Catalog data stays until you delete it or close the account. Inventory files you upload are kept with your organization's import history, so the products created from them can be traced back to the original row; you can ask us to delete them (section 9). Audit records of actions are kept because the whole point of an audit trail is that it can be checked afterwards; operational records such as scheduled-job runs are kept for ninety days, and failures are kept longer. Closing an account moves it to a closed state rather than erasing history that other users still legitimately rely on.
9. Your rights
You can ask for a copy of your personal data, ask us to correct it, ask us to delete it, or object to a particular use. Write to the address in the footer from the email address on the account and we will respond within thirty days. If you are in the EU, the UK or Brazil, you also have the right to complain to your local data protection authority.
10. Cookies
The product sets a session cookie that keeps you signed in. The product and this website also use PostHog, a product analytics service, which stores an analytics identifier in a first-party cookie and in your browser's local storage so that we can count visits, see which pages and steps are used, and find problems. PostHog also records sessions — how pages are scrolled and clicked — with typed input and sensitive areas masked in your browser before anything is sent. There are no advertising or cross-site tracking cookies, and analytics data is not sold or used for advertising. You can block these cookies in your browser settings; the website and the product keep working without them.
11. Changes and contact
If we change this policy in a way that matters, we announce it by email rather than only updating the date at the top. The controller responsible for your personal data is BLACKFORGE TECHNOLOGIES INC, the operator of lotflows.com. Privacy requests and questions about this policy may be sent to contact@lotflows.com.