Last updated: October 31, 2025
Flows8 (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR – EU 2016/679) and other applicable data protection laws.
This Privacy Policy explains how we collect, use, store, and protect your data when you visit flows8.com, create an account, purchase items, or use our services.
Flows8 is a digital marketplace where users can buy and sell automation workflows, AI templates, and no-code integrations.
We operate as a data controller for user and buyer information collected directly on our website.
Contact:
📧 support@flows8.com
🌍 https://www.flows8.com
We only collect information that is necessary to operate and improve our services:
Name, email address, username, password
Country and language preference
Purchase and subscription details, invoice data
Payments processed via Stripe or PayPal (we do not store credit card numbers)
IP address, browser type, device information
Actions on our platform (downloads, favorites, purchases, logins)
Cookies and session identifiers for login and analytics
Messages or support requests you send to our team or to authors
Payment and tax details required for payouts
Uploaded content, listings, and sales data
We use your personal data only for legitimate purposes, including:
Creating and managing your Flows8 account
Processing payments and fulfilling digital orders
Delivering downloads and product updates
Communicating important service or billing notifications
Responding to support requests
Preventing fraud and maintaining platform security
Complying with legal and tax obligations
Improving marketplace functionality and user experience
We do not sell or rent your personal information to third parties.
We process your data under these GDPR bases:
Contractual necessity – to provide our services (account, downloads, payments)
Legal obligation – for invoicing, accounting, and tax compliance
Legitimate interest – for security, fraud prevention, analytics, and improvement
Consent – for optional marketing communications and cookie tracking
We share data only with trusted partners necessary for Flows8’s operation:
Stripe / PayPal – secure payment processing
Email delivery providers – sending receipts and support emails
Cloud hosting and analytics services – website operation and performance tracking
All third-party partners are GDPR-compliant and process your data under strict confidentiality and security agreements.
Important: Flows8 is not responsible for how independent authors handle any data you may provide directly to them (e.g., through their profiles or external support links).
Authors act as independent data controllers for any personal information they collect outside the Flows8 platform.
Flows8 uses cookies and similar technologies to:
Maintain your login session
Track downloads and usage limits
Measure website performance (via privacy-friendly analytics)
You can manage or disable cookies anytime in your browser settings.
We keep your data only for as long as necessary:
Account and transaction data: retained while your account is active and up to 6 years afterward for tax and legal purposes.
Support and communication data: up to 24 months.
You may request account deletion at any time (see Section 10).
We use robust technical and organizational measures to protect your data, including:
SSL/TLS encryption on all pages
Secure cloud storage with access controls
Regular server updates and vulnerability scans
Encrypted backups
However, no system is 100% secure; users are encouraged to maintain strong passwords and report any suspected breach.
If your data is transferred outside the EU/EEA, we ensure protection via Standard Contractual Clauses (SCCs) or equivalent safeguards with our partners (e.g., Stripe, email providers).
You have the following rights under GDPR:
Access – request a copy of your personal data
Rectification – correct inaccuracies
Erasure (“Right to be forgotten”) – request deletion of your account
Restriction – limit how your data is used
Portability – receive your data in a structured, machine-readable format
Objection – opt out of direct marketing or legitimate interest processing
To exercise any of these rights, contact support@flows8.com.
We will respond within 30 days of receiving your verified request.
Flows8 is not intended for individuals under 18 years of age.
We do not knowingly collect data from minors. If we learn we have, it will be deleted immediately.
In the unlikely event of a data breach affecting personal information, Flows8 will notify users and relevant supervisory authorities within 72 hours, as required by GDPR.
Flows8 may contain links to third-party websites (e.g., author portfolios, support pages).
We are not responsible for their content or privacy practices. We encourage you to review each site’s Privacy Policy before sharing any information.
We may update this Privacy Policy periodically to reflect platform changes or legal requirements.
The updated version will always be posted on this page, with the “Last updated” date reflecting the latest revision.
If you have questions or wish to exercise your data rights, please contact:
📧 support@flows8.com
🌍 https://flows8.com/privacy
📍 Flows8, Portugal
