FlowForgeSoft, LLC ("FlowForge," "we," "us," or "our") built FlowForge to give developers a verifiable record of their own work. This policy explains, in plain terms and without generic filler, what information we collect when you visit flowforgesoft.com or use the FlowForge product, why we collect it, and the choices you have.
The short version: we collect the account information needed to run your subscription, billable-time data the product itself exists to track, and nothing else. We do not sell your information. We do not run third-party advertising or analytics trackers on this site or in the product.
1. Who we are
FlowForge is a product of FlowForgeSoft, LLC, a Delaware limited liability company (Delaware File #10616707), located at 2810 N Church St STE 88527, Wilmington, DE 19802. For any privacy question, contact us at alex@flowforgesoft.com.
2. Information we collect
2.1 Account information
When you sign up, we collect the email address and password you provide, and — only if you choose to enter it — a display name used to personalize your welcome email. Your password is handled by Supabase Auth, our authentication provider; FlowForge never stores your password in plain text.
2.2 Payment information
Subscription checkout is processed by Stripe on Stripe's own hosted payment page. FlowForge's servers never receive, transmit, or store your card number, expiration date, or security code — that data goes directly to Stripe. Stripe notifies us of billing events (checkout completed, subscription updated, payment failed) over a signature-verified webhook, and we keep a record of those events — including the billing contact details Stripe collected for the transaction (name, email, and billing address) and the amount charged — to activate and maintain your license and to have a forensic record if a billing dispute comes up. We use this to operate your subscription; we don't use it for marketing.
2.3 Product usage data (time tracking)
FlowForge's core feature is generating a verifiable, billable record of your own development work. To do that, the FlowForge CLI/TUI records session and time-tracking events locally on your machine — which ticket you're working on, session start/stop times, and token-cost data — and syncs them in batches to our database once you're signed in. This data exists to power the time-tracking and reporting feature you're using it for; it is not shared with, or sold to, any third party.
2.4 Communications
If you email support, we keep that correspondence to respond to you and to improve the product. Sign-up currently asks you to agree to receive occasional product-update emails as part of creating an account; you can unsubscribe from those emails at any time from the link in any message we send, without affecting your ability to keep using FlowForge.
3. Cookies and local storage
flowforgesoft.com does not set tracking cookies. The site uses your
browser's localStorage and sessionStorage for
strictly functional purposes: remembering that you've dismissed a
launch-announcement banner, caching the plan/billing options you selected
while moving between pages, and — via our authentication provider's own
SDK — keeping you signed in between visits. None of this is used for
advertising or cross-site tracking, and we don't run any third-party
analytics or advertising scripts on this site.
4. Who we share information with
We share information only with the service providers that make FlowForge work, each acting as a processor under contract with us — never as an independent seller of your data:
- Stripe — payment processing and subscription billing.
- Supabase — our authentication and database provider, which stores your account, entitlement, and product-usage records.
- Amazon Web Services — hosting for flowforgesoft.com and the checkout backend.
We do not sell your personal information, and we do not share it with data brokers or advertising networks.
5. How we protect your information
Traffic to flowforgesoft.com is encrypted in transit (TLS 1.2+). Every table holding customer data is protected by database-level access controls: your account, billing, and license records are readable only by you, and team-oriented data — the tickets and usage records that make sense to share within a project — is readable only by members of that project or organization, never by anyone outside it. Internal writes go through server-controlled procedures rather than direct client access. See our Security page for the full, specific breakdown of what we do — and what we don't yet claim.
6. Your choices and rights
You can review and update your account details from within the product. To request a copy of your data, ask us to correct it, or ask us to close your account and delete associated personal data, email alex@flowforgesoft.com. We handle these requests manually today — we don't yet have a self-serve export/delete tool — and we'll respond within a reasonable time. Deleting your account removes your active account and product-usage data; it does not remove the billing-event forensic ledger described in §7, which we keep separately to resolve billing disputes.
7. Data retention
We keep account and billing records for as long as your account is active, and afterward only as needed to satisfy tax, accounting, and legal obligations. Time-tracking session data is retained so your historical reports remain accurate for as long as you keep your account. The billing-event record described in §2.2 is kept as a forensic ledger — separate from your active account record — so we can resolve a billing dispute or reconstruct what happened on your subscription even after an account is closed; it is not linked back into your day-to-day account data once you've deleted your account.
8. International users
FlowForge is operated from the United States and our infrastructure runs on U.S.-based cloud providers. If you use FlowForge from outside the United States, your information will be transferred to and processed in the United States.
9. Children's privacy
FlowForge is a professional developer tool and is not directed at, or knowingly used to collect information from, children under 16.
10. Changes to this policy
If we make a material change to how we handle your information, we'll update the date at the top of this page. We encourage you to check back periodically.
11. Contact us
Questions about this policy or how we handle your data: alex@flowforgesoft.com, or by mail at FlowForgeSoft, LLC, 2810 N Church St STE 88527, Wilmington, DE 19802.