Privacy Policy

FlowGround is a product of NullFortis Security ("NullFortis", "we", "us"). This policy explains what we collect and how we use it. It supplements, and should be read alongside, NullFortis's general Privacy Policy.

1. Information We Collect

FlowGround's Business Mode and Technical Mode simulations run entirely in your browser and collect nothing. For everything else:

• Account information: the email and password you sign up with (your password is hashed before storage — we never see or store your plain-text password).
• Usage data: diagrams you save (including their content and structure), your AI Architect chat messages, and your monthly usage counts against your account's limits.
• Business data: if you set up or join a business plan — your company name and details, team member email addresses you invite, and your organization's seat/license configuration.
• Payment data: processed directly by our payment processor, Razorpay. We never see or store your full card number — we retain billing metadata such as your plan, billing cycle, and subscription status.
• Technical data: your IP address and standard browser/device information sent with any request, and a small number of cookies described in Section 4.

2. How We Use Information

We use the information above to provide the service you signed up for: authenticating you, saving and loading your diagrams, enforcing your account's usage limits, processing payments and managing your subscription, sending transactional emails (like a business-plan confirmation or a team invite), and improving FlowGround's reliability. We do not sell your personal information to third parties.

3. AI Processing & Third-Party AI Providers

When you use the AI Architect chat, your messages and the current canvas state are sent to a third-party AI provider — Anthropic, OpenAI, or a self-hosted/BYOK Ollama server — to generate a response. If you've supplied your own API key or Ollama server, that data goes directly to the provider you configured, under that provider's own privacy practices. Otherwise, it goes through a provider we've configured on your behalf, and is subject to that provider's own data-use terms for API traffic.

4. Cookies & Local Storage

We use a small number of functional cookies and local-storage entries: your signed-in session, your light/dark theme preference, whether you've seen the product tour, and — for visitors who haven't signed in — an anonymous daily-usage counter for the AI Architect's free-tier throttle. None of these are advertising or cross-site tracking cookies.

5. Third-Party Services

FlowGround relies on the following third-party services to operate:

• Razorpay — payment processing for business plans.
• Anthropic, OpenAI, and/or Ollama — AI processing for the AI Architect chat feature, as described in Section 3.
• Email delivery — sending account, billing, and invite-related transactional emails.

6. Data Retention

We retain your account data, saved diagrams, and billing records for as long as your account is active and as needed to maintain business and tax records afterward. You may request deletion of your account and associated data at any time (Section 8).

7. Data Security

We apply reasonable technical safeguards — including database-level access controls scoping every user to their own data — to protect information you provide. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

You may access, correct, or delete your account and personal information at any time from your account settings, or by emailing [email protected].

9. Children's Privacy

FlowGround is intended for business and professional educational use and is not directed at children. We do not knowingly collect information from children.

10. Company Registration

NullFortis Security is registered as a Micro, Small & Medium Enterprise (MSME) under the Udyam Registration scheme of the Government of India, Registration Number UDYAM-TN-09-0116962.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page reflects the most recent revision.

12. Contact

Questions about this policy can be sent to [email protected].