Privacy Policy

Flow Directive ("we," "us," "our," or "the operator") operates flowdirective.app (the "Site"). We are committed to protecting the privacy of our visitors and users in accordance with Canada's federal privacy law, the Personal Information Protection and Electronic Documents Act (PIPEDA), and applicable provincial privacy legislation. This policy explains what personal information we collect, why, how we use and safeguard it, and the choices you have.

1. Accountability

Flow Directive is responsible for the personal information under our control and has designated a privacy contact who is accountable for compliance with this policy and PIPEDA. If you have any questions about how we handle your personal information, or wish to exercise any of the rights described below, contact us at hello@flowdirective.app.

2. What We Collect and Why

We only collect personal information for the identified purposes below, and we will not collect it for any purpose that a reasonable person would consider inappropriate.

2.1 Information you provide

• Name and email address — collected when you sign up for the newsletter, download a freebie, or begin the AI Skill-Loss Audit. Purpose: to deliver the content or service you requested, to communicate with you about your audit, and (with your consent) to send occasional editorial insights.
• Audit responses and scores — your answers to the audit questions and the resulting capability and overall scores. Purpose: to generate your personalized report, to save your results so you can return to them, and to improve the accuracy of our assessment framework.
• Payment information — when you purchase the premium report, payment is processed by our payment processor, Stripe. We do not store full card numbers on our servers; Stripe handles the transaction and returns a confirmation. Purpose: to fulfill your purchase and maintain records for billing and tax compliance.
• Correspondence — any information you include when you contact us. Purpose: to respond to your inquiry and keep a record of the communication.

2.2 Information collected automatically

• Usage and device data — such as pages visited, referring URLs, browser type, and approximate location (derived from IP address). Purpose: to analyze traffic trends, measure content performance, and improve the Site.
• Cookies and similar technologies — used to remember preferences, operate the Site, and (with your consent) support analytics and marketing measurement. You can set your browser to refuse cookies, though some features may not function as intended.

3. Consent

We obtain your consent at the time of collection. Providing your name and email is voluntary, but it is required to receive the newsletter, freebies, or audit results. By submitting a form or completing a purchase you consent to the collection, use, and disclosure described in this policy for those identified purposes. You may withdraw consent at any time (see section 8), subject to legal or contractual restrictions — for example, we may need to retain limited information to complete a transaction you started.

4. Limiting Collection

We limit the personal information we collect to what is necessary for the purposes we have identified. We do not collect sensitive personal information (such as health, financial, or government-issued identification details) beyond what is required to operate the Site and process payments through our processor.

5. Use, Disclosure, and Retention

We use your personal information only for the purposes identified above, or as required or permitted by law. We do not sell or rent your personal information. We retain personal information only as long as necessary to fulfill the purposes for which it was collected and to meet legal, accounting, or reporting requirements, after which it is deleted or de-identified.

We may share personal information with the categories of third parties described in section 7, and we may disclose information when required by law, court order, or to protect the rights, property, or safety of Flow Directive, our users, or others.

6. Accuracy

We aim to keep personal information as accurate, complete, and up to date as necessary for the purposes for which it is used. You can help by keeping your information current — contact us to update or correct your details at any time.

7. Safeguards and Third-Party Service Providers

We protect personal information with appropriate physical, organizational, and technical safeguards appropriate to the sensitivity of the information. These include restricted access controls, encryption in transit, and secure hosting.

We use trusted third-party services that process personal information on our behalf, each under contracts limiting their use of that information:

• Hosting and platform services (Base44) — hosts the Site and stores the database records that power your account, audit responses, and content.
• Payment processing (Stripe) — processes payments securely. Stripe's handling of card data is governed by its own compliance and privacy standards. See Stripe's Privacy Policy.
• Email and marketing (Kit / ConvertKit) — delivers our newsletter and freebie content and helps us manage subscriber preferences.
• Analytics (Google Analytics) — helps us understand how visitors use the Site so we can improve it.

Some of these providers may store or process information outside Canada. By using the Site you acknowledge that your information may be transferred to and processed in jurisdictions with privacy laws that differ from Canada's. We take steps to ensure these providers offer a comparable level of protection.

8. Your Rights and Access

Upon request, and subject to legal limitations, we will inform you of the personal information we hold about you, what it is used for, and to whom it has been disclosed. You may request access to, correction of, or deletion of your personal information, or withdraw consent for its ongoing use, by contacting us at hello@flowdirective.app. We will respond within a reasonable time and at no cost, or a minimal cost if the request is extensive.

To unsubscribe from our newsletter, use the unsubscribe link in any email or contact us — we honor opt-outs promptly.

9. Openness

We make this policy available on our Site so you can easily learn about our personal information practices. If you have questions about any of these practices, we are happy to provide more detail on request.

10. Challenging Compliance

If you believe we have not complied with this policy or with PIPEDA, you may file a complaint with the Office of the Privacy Commissioner of Canada:

• Website: www.priv.gc.ca
• Toll-free: 1-800-282-1376
• Email: info@priv.gc.ca

We will investigate all complaints and respond in writing. We will also keep you informed of the outcome.

11. Children's Privacy

The Site is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

12. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or for legal reasons. We will post the updated policy here with a revised "Last updated" date. Material changes will be noted on the Site or communicated to you where appropriate.

13. Contact Us

For any privacy questions, requests, or complaints, contact us at hello@flowdirective.app or through our contact page.