Privacy policy
Flowpast Technology Nordics AB
Last updated: January 31, 2026
Introduction
Flowpast Technology Nordics AB, together with its subsidiaries and affiliates (“Flowpast”, “we”, “us”, or “our”), operates the Flowpast digital template library platform at https://flowpast.com (the “Service”).
At Flowpast, your privacy is one of our main priorities. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our Service and the choices you have regarding your data.
We process personal data in accordance with the General Data Protection Regulation (EU 2016/679) (“GDPR”) and follow good governance and data processing practices. For further information about GDPR, please refer to: https://eur-lex.europa.eu/eli/reg/2016/679/oj
Controller
Data controller:
Flowpast Technology Nordics AB
Postbox 15 450, Kungsholmen
112 18 Stockholm, Sweden
For any questions about our data processing, please contact us at: contact@flowpast.com
Information We Collect
We collect several types of information for various purposes to provide and improve our Service.
1. Personal Data
While using our Service, we may ask you to provide certain personally identifiable information that can be used to contact or identify you (“Personal Data”). This may include:
Account Registration Information
Name – To personalize your account
Email address – To create your account, send login credentials, and communicate with you
Password – Stored in encrypted/hashed format for account security
Payment and Billing Information
Billing details – To process your subscription payments
Payment card information – Handled entirely by our payment processor, Stripe. We do not store or have access to your complete payment card details
User Preferences
Communication preferences – To manage your newsletter and email notification settings
Template favorites – To remember templates you’ve saved or bookmarked
2. Usage Data
We automatically collect information about how you use the Service (“Usage Data”), including:
IP address – For security and analytics purposes
Browser type and version – To optimize the Service for different browsers
Device information – Device type, operating system, unique device identifiers
Pages visited – Which templates, workflows, and pages you view
Downloads and copies – Which templates you download or copy
Time and date of visits – When and for how long you use the Service
Referral source – How you found our Service (e.g., search engine, direct link)
3. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to monitor activity on our Service and store certain information. Cookies are small data files placed on your device.
Types of cookies we use:
Necessary Cookies – Required for the Service to function (e.g., maintaining your login session)
Preference Cookies – Remember your settings and preferences
Security Cookies – Used for security purposes and fraud detection
Analytics Cookies – Help us understand how users interact with the Service (Google Analytics)
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some features of our Service.
For more information about the cookies we use and your choices, see the “Your Privacy Rights” section below.
4. Email Communications
If you sign up for our newsletter or marketing emails:
We collect your email address and communication preferences
You can unsubscribe at any time using the link in our emails
We may send you transactional emails (account confirmations, subscription receipts, password resets) which are necessary for the Service
How We Use Your Data
We use the collected data for the following purposes:
To provide and maintain our Service – Creating and managing your account, processing downloads, and providing customer support
To process payments – Managing your subscription and billing (processed through Stripe)
To communicate with you – Sending transactional emails, responding to inquiries, and providing customer support
To send marketing communications – Sending newsletters and promotional content (only if you opt in, and you can unsubscribe anytime)
To improve our Service – Analyzing usage patterns to enhance user experience and develop new features
To monitor usage – Tracking Service performance and user engagement
To detect and prevent issues – Identifying technical problems, fraud, and security threats
To comply with legal obligations – Meeting regulatory requirements and responding to legal requests
Legal Basis for Processing (GDPR)
As an EU-based company, we process your personal data based on the following legal grounds under GDPR:
Contractual Necessity – Processing is necessary to perform our contract with you (e.g., providing access to templates when you subscribe)
Consent – You have given explicit consent for specific purposes (e.g., marketing emails)
Legitimate Interests – Processing is necessary for our legitimate business interests (e.g., improving our Service, fraud prevention), provided it does not override your rights
Legal Obligation – Processing is necessary to comply with legal requirements
Data Retention
We retain your personal data only for as long as necessary for the purposes outlined in this Privacy Policy:
Account data – Retained while your account is active, plus 30 days after account deletion (for backup and legal purposes)
Usage data – Retained for up to 2 years for analytics and Service improvement
Payment records – Retained for 7 years to comply with accounting and tax regulations
Marketing data – Retained until you unsubscribe or request deletion
When we no longer need your data, we will securely delete or anonymize it.
Data Sharing and Disclosure
We do not sell, trade, or rent your personal data to third parties. We may share your information in the following limited circumstances:
Service Providers
We may share your data with third-party service providers who assist us in operating the Service:
Stripe – Payment processing (see Stripe’s privacy policy: https://stripe.com/privacy)
Google Analytics – Website analytics (see Google’s privacy policy: https://policies.google.com/privacy)
Email service providers – To send transactional and marketing emails
Hosting providers – To store and serve our website and databases
These third parties are contractually obligated to protect your data and use it only for the purposes we specify.
Legal Requirements
We may disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).
We may disclose your data in good faith belief that such action is necessary to:
Comply with legal obligations
Protect and defend our rights or property
Prevent or investigate possible wrongdoing in connection with the Service
Protect the personal safety of users or the public
Protect against legal liability
Business Transfers
If Flowpast is involved in a merger, acquisition, or asset sale, your personal data may be transferred. We will provide notice before your data is transferred and becomes subject to a different privacy policy.
International Data Transfers
Your information may be transferred to and maintained on servers located outside of your country or jurisdiction where data protection laws may differ.
If you are located in the European Economic Area (EEA), we ensure that any data transfers outside the EEA are protected by:
Standard Contractual Clauses (SCCs) approved by the European Commission
Adequate safeguards as required by GDPR
We will take all necessary steps to ensure your data is treated securely and in accordance with this Privacy Policy.
Data Security
We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
Security measures include:
Encryption of data in transit (HTTPS/TLS)
Encrypted storage of passwords
Regular security assessments and updates
Access controls and authentication requirements
Secure payment processing through Stripe (PCI DSS compliant)
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.
Your Privacy Rights (GDPR)
As a data subject in the European Economic Area, you have the following rights regarding your personal data:
1. Right to Access
You have the right to request a copy of the personal data we hold about you.
2. Right to Rectification
You have the right to request that we correct any inaccurate or incomplete personal data.
3. Right to Erasure (“Right to be Forgotten”)
You have the right to request deletion of your personal data, subject to certain exceptions (e.g., legal obligations).
4. Right to Restriction of Processing
You have the right to request that we restrict processing of your personal data in certain circumstances.
5. Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
6. Right to Object
You have the right to object to processing of your personal data for direct marketing purposes or based on legitimate interests.
7. Right to Withdraw Consent
Where we rely on your consent to process your data, you have the right to withdraw that consent at any time.
8. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state where you reside, work, or where an alleged infringement of GDPR occurred.
Swedish Data Protection Authority (Datainspektionen):
Website: https://www.datainspektionen.se
How to Exercise Your Rights
To exercise any of these rights, please contact us at: contact@flowpast.com
We will respond to your request within 30 days. These requests are free of charge, but we may charge a reasonable fee for excessive or manifestly unfounded requests.
Children’s Privacy
Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children under 18.
If you are a parent or guardian and you become aware that your child has provided us with personal data, please contact us. If we discover that we have collected personal data from a child under 18 without parental consent, we will take steps to delete that information.
Third-Party Links and Services
Our Service may contain links to third-party websites, plugins, and applications (e.g., n8n, Make, Zapier, OpenAI, Google services) that are not operated by us.
We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We strongly advise you to review the privacy policy of every site you visit.
Our workflow and prompt templates may reference third-party services, but we are not affiliated with or endorsed by those companies.
Analytics and Tracking
Google Analytics
We use Google Analytics to analyze usage of our Service. Google Analytics collects information such as how often users visit the Service, what pages they visit, and what other sites they used prior to coming to our Service.
We use the information from Google Analytics to maintain and improve our Service. Google’s ability to use and share information collected by Google Analytics is restricted by the Google Analytics Terms of Service and the Google Privacy Policy.
You can prevent Google Analytics from recognizing you on return visits by disabling cookies in your browser or by installing the Google Analytics opt-out browser add-on:
https://tools.google.com/dlpage/gaoptout
IP Anonymization: We have enabled IP anonymization in Google Analytics, so your full IP address is not stored.
Email Marketing and Communications
Newsletter and Promotional Emails
If you opt in to receive our newsletter or promotional emails, we will send you updates about new templates, features, and special offers.
You can unsubscribe at any time by:
Clicking the “unsubscribe” link in any marketing email
Updating your email preferences in your account settings
Contacting us at contact@flowpast.com
Transactional Emails
We will send you transactional emails (account confirmations, password resets, subscription receipts) that are necessary for the operation of your account. You cannot opt out of these emails.
Cookie Preferences
You can manage your cookie preferences in the following ways:
Browser Settings – Most web browsers allow you to control cookies through their settings. You can set your browser to refuse cookies or delete certain cookies.
Opt-Out Links – For analytics cookies (Google Analytics), use the opt-out tool mentioned above.
Please note that disabling cookies may affect the functionality of our Service.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons.
We will notify you of any changes by:
Updating the “Last updated” date at the top of this Privacy Policy
Posting the new Privacy Policy on this page
Sending you an email notification (for material changes)
Your continued use of the Service after the effective date of the revised Privacy Policy constitutes your acceptance of the changes. If you do not agree to the new terms, please stop using the Service.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: contact@flowpast.com
Postal Address:
Flowpast Technology Nordics AB
Postbox 15 450, Kungsholmen
112 18 Stockholm, Sweden
Definitions
Data Controller – The entity that determines the purposes and means of processing personal data. For this Service, the data controller is Flowpast Technology Nordics AB.
Data Processor – An entity that processes personal data on behalf of the data controller (e.g., Stripe, Google Analytics).
Data Subject – Any living individual who uses our Service and whose personal data we process.
Personal Data – Any information relating to an identified or identifiable individual.
Processing – Any operation performed on personal data, including collection, storage, use, disclosure, or deletion.
By using Flowpast, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your personal data as described herein.