Privacy Policy

This Privacy Policy describes how Procestoppers BV ("we") collects, uses, and shares your personal data when you use FlowTopper.

1. Data we collect. Account data (email, name, locale), organization data (name, branding, members), product data (process models you create, conventions you publish, interview transcripts), and operational data (logs, error events).

2. Why we collect it. To operate the Service, bill you accurately, send transactional emails (account, billing, schema review notifications), and improve the product.

3. Where it's stored. Postgres + Azure Blob Storage in West Europe. Backups are encrypted at rest.

4. Who we share it with. Stripe (billing), Resend (transactional email), Anthropic / Azure AI Foundry (when you use AI features), ElevenLabs (when you use voice features), Sentry (error reports, with PII stripped). We don't sell your data.

5. Your rights. You can access, correct, export, or delete your data. Delete your account from Settings → Danger zone (GDPR Article 17).

6. Retention. Active account data is retained while your account exists. Deleted accounts retain only a hashed email + timestamp in our audit log to prove the erasure request was processed.

7. Cookies. We use first-party cookies for authentication and MFA enforcement. No third-party tracking cookies.

8. Contact. Privacy questions: support.