Privacy Policy for Flowan Extension

Last Updated: October 9, 2025
Effective Date: October 9, 2025

Introduction

Flowan ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how our Chrome extension collects, uses, and protects your information.

Information We Collect

1. Information You Provide

Workflows: When you create automation workflows, they are stored locally in your browser using IndexedDB.

Optional Cloud Sync: If you choose to enable cloud sync, your workflows will be securely stored on our servers (Supabase).

2. Information We DO NOT Collect

Browsing History: We do not track or record your browsing history.
Personal Information: We do not collect names, addresses, phone numbers, or other personal data.
Website Content: We do not store or transmit the content of web pages you visit (unless you explicitly save it in a workflow).
Passwords or Credentials: We never access or store your login credentials for any website.
Cookies: We do not use tracking cookies.

How We Use Your Information

We use the collected information solely to:

Provide automation services: Execute your workflows on the websites you specify
Store your workflows: Save your automation scripts locally or in the cloud (if enabled)
Improve the extension: Analyze anonymous usage patterns to fix bugs and add features

Permissions Explained

Our extension requests the following permissions:

activeTab

Why: To interact with the current webpage when you click the extension icon.

How: Only accesses the active tab when you trigger an automation.

storage

Why: To save your workflows locally in your browser.

How: Uses Chrome's local storage API (IndexedDB) to store workflow configurations.

scripting

Why: To execute automation scripts on web pages.

How: Injects JavaScript code only on pages where you've created workflows.

tabs

Why: To manage browser tabs during automation.

How: Only interacts with tabs when executing a workflow you've created.

host_permissions (<all_urls>)

Why: To support automation on any website you choose.

How: Only executes on websites where you've explicitly created a workflow.

Data Storage

Local Storage (Default)

By default, all your workflows are stored locally on your device using Chrome's IndexedDB. We cannot access this data.

Cloud Storage (Optional)

If you enable cloud sync:

Workflows are encrypted in transit (HTTPS)
Stored on Supabase servers (Tokyo region)
You can delete your data at any time from the settings

Third-Party Services

LLM APIs (Optional)

If you use AI features, we may send your prompts to:

OpenAI
Anthropic (Claude)
Google (Gemini)
Zhipu AI (GLM)
Alibaba (Qwen)
Moonshot

Note: We only send the text you input into AI fields. We do NOT send your browsing history or personal information.

Supabase (Optional Cloud Sync)

If enabled, your workflows are stored on Supabase servers located in Tokyo, Japan.

Data Security

We implement industry-standard security measures:

HTTPS encryption for all network requests
Secure authentication (if using cloud sync)
No plaintext storage of sensitive data

Your Rights

You have the right to:

Access: View all data stored by the extension (Settings → Export Data)
Delete: Remove all your workflows and data (Settings → Delete All Data)
Opt-Out: Disable cloud sync at any time

Children's Privacy

Flowan is not intended for users under 13 years of age. We do not knowingly collect information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

Updating the "Last Updated" date
Showing an in-extension notification

GDPR Compliance

For users in the European Union:

Legal Basis: Legitimate interest (providing automation services)
Data Retention: We retain your data only as long as you use the extension
Data Portability: You can export your workflows at any time
Right to be Forgotten: You can delete all your data from Settings

Contact Us

If you have questions about this Privacy Policy:

Email: support@flowan.ai
Website: https://flowan.ai

Summary: Flowan does not collect personal information, browsing history, or passwords. Your workflows are stored locally by default. Cloud sync is optional and encrypted.