Privacy Policy

Last updated: September 2026

What FlowPro collects

FlowPro only holds what it needs to do its job:

• Webflow access token for each site you authorise. Needed so FlowPro can add its loader script to that site's custom code. Nothing else is written.
• Site id and site name for each authorised site, so the panel can show which site it is talking to.
• Feedback messages and screenshots that you send yourself using the panel's feedback button. Never captured automatically.
• Your name and email when you send feedback while a site is authorised. Resolved from Webflow's own identity token so you do not have to type them.
• IP address for sign-in attempts on the admin dashboard. Used only to rate-limit failed sign-ins. Expires after fifteen minutes.

What FlowPro does not collect

• No analytics, no tracking pixels, no third-party cookies on the panel or the loader.
• No visitor data from your published sites. The loader runs entirely in the browser and phones nothing home.
• No content from your Webflow projects beyond the site id and display name.

Where it is stored

All data lives in a single Cloudflare Workers KV namespace, encrypted at rest by Cloudflare, in Cloudflare's global network. Access tokens never leave the Worker.

How long it is kept

• Site tokens: until you revoke the site (either from the FlowPro admin dashboard or by uninstalling the app in Webflow).
• Feedback and screenshots: until you delete them from the dashboard.
• Rate-limit records: fifteen minutes, then deleted automatically.

Third parties

FlowPro is built on:

• Cloudflare Workers and KV for hosting and storage.
• Webflow's Data API for reading site info and writing custom code, only for sites you authorise.
• jsDelivr CDN for delivering the Swiper.js and Sienna Accessibility libraries to your published sites. Standard browser requests, no accounts, no cookies.

FlowPro sells no data to anyone.

Your rights

You can request deletion of anything held about you at any time. Email flowwithsiraj@gmail.com and we will remove it within seven days.

Contact

Questions about this policy: flowwithsiraj@gmail.com.