Privacy notice
This notice explains what data FlowSmith collects through the contact form, why it is collected, where it is stored, and how to have it deleted.
1. Who we are
FlowSmith is a small automation studio reachable through the contact form on this site. The contact details you leave are used to reply to that inquiry. If a deployment uses a third-party form processor (for example Formspree), that is noted on the site.
2. What we collect
When you submit the free-audit form we collect:
- your name, contact (email or WeChat), a description of the task you want automated, and optional budget/timeline;
- a page-source parameter (which page or channel the inquiry came from) and the page language;
- technical data for spam protection: an irreversible hash of your IP address and your browser User-Agent.
We also keep internal follow-up notes on your inquiry (e.g. reply time, key points discussed), visible only to the site admin and never shared.
We never ask for passwords, ID numbers, bank details or other sensitive personal data. Please do not put such information in the form.
3. Why we collect it
Only to reply to your inquiry, judge feasibility and give a rough price, and — if you agree — to schedule a 15-minute call. It is not used for bulk marketing and is never sold or shared for advertising.
4. Where it is stored
- Self-hosted deployments: leads are stored in a SQLite database on our own server (California, USA) and are readable only with an admin token;
- Static deployments: the form is processed by Formspree, so submissions are stored by Formspree and in our mailbox, subject to their privacy policy;
- Telegram alerts (if enabled): name, contact and a message excerpt are sent to our private Telegram chat.
5. How long we keep it
Leads are kept until you ask us to delete them. Daily backups are pruned after 14 days. If you request deletion, we remove the database record and stop contacting you within 7 days, except where the law requires us to keep something.
6. Cookies and local storage
This site sets no cookies, runs no ad trackers and embeds no third-party analytics. The only
browser storage used is your language preference (flowsmith-lang in localStorage),
which you can clear at any time.
We run our own anonymous page-view stats to know whether pages are read: it records the page path, a source parameter (e.g. which industry page or channel you came from), a random visitor identifier stored in your browser's localStorage (you can clear it) and a browser User-Agent string. No IP address is stored, there is no cross-site tracking, nothing is sold, and only aggregate numbers are visible to the site admin.
7. Your rights
You can ask to access, correct or delete the data we hold about you, or ask us to stop contacting you. Send the request through the contact form and include the details you originally used.
8. Security
The site runs over HTTPS, the admin endpoint requires a token, and client project API keys are scoped to the minimum and stored in a password manager, then rotated or revoked at handover.
9. Changes
When this notice changes we update the date at the top. Material changes will be highlighted on this page.
This is a plain-language template, not legal advice. Adjust it for your jurisdiction before relying on it — especially if you handle EU/UK clients.