Privacy Policy

Flikk ("we", "our", "us") is a product of Creology Ltda, whose details are at the bottom of this page. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

We collect information you provide directly: account details (name, email, password), organization data, payment information processed by Stripe, and flow configurations you create.

We automatically collect: IP addresses, browser type, device information, pages visited, and timestamps via server logs and analytics tools.

We use your data to operate and improve the platform, process transactions, send transactional emails, provide support, and analyze usage patterns to improve the service.

We never sell your personal data, and we share it only with these providers, which process it on our behalf:

Cloudflare runs our servers and flow engine and stores encrypted credentials and paused flows · Neon hosts our database · Vercel hosts our website · Stripe processes payments · Resend sends transactional emails · PostHog gives us product analytics

When your flows connect to other services, such as Meta, Google or an AI provider, your data goes to those services under your own agreements with them.

When you connect a third-party account to Flikk, we read only the data your flows need, and each integration's own privacy page, linked from its page at flikk.dev/integrations, lists exactly what that is.

We use essential cookies for authentication and session management. See our Cookie Policy for detailed information about the cookies we use and how to manage your preferences.

We keep your account data for as long as your account is active, and we keep flow runs until your organization deletes them. You can request data export or deletion at any time by emailing privacy@flikk.dev.

You have the right to access, correct, export, or delete your personal data. You can exercise these rights from your account settings or by contacting us. We respond to all requests within 30 days. Every way to delete your data is listed at flikk.dev/data-deletion.

We use industry-standard security measures including encryption in transit (TLS), encryption at rest (AES-GCM for credentials), key derivation via PBKDF2, and tenant-scoped database isolation.

Your data may be processed in regions where our infrastructure providers operate. We ensure appropriate safeguards are in place for international transfers in compliance with applicable law.

Our services are not directed to individuals under 16. We do not knowingly collect personal information from children.

We may update this policy from time to time. We will notify you of material changes via email or an in-app notification. Continued use of the service after changes constitutes acceptance.

For privacy-related questions or requests, contact us at privacy@flikk.dev.