Privacy Notice
Last updated: May 24, 2026
1. Who we are
This Privacy Notice describes how Flowmittal LLC, a Minnesota limited liability company ("Flowmittal", "we", "us"), collects, uses, and shares personal information when you use our platform, websites, and related services (the "Service"). Flowmittal is the controller of personal information processed in connection with the Service.
2. Information we collect
- Account information: name, email address, password (hashed), company, and role.
- Project content: submittals, RFIs, drawings, specs, comments, and files you upload.
- Support communications: messages you send us and information you share when contacting support.
- Usage and device data: log data, IP address, browser type, pages viewed, timestamps, and similar telemetry collected automatically.
- Cookies and similar technologies: see Section 7.
Payment information (card number, billing address) is collected and processed directly by our payment provider, Paddle.com — we do not store full payment details on our servers.
3. How we use information
- Provide, maintain, and improve the Service (legal basis: performance of a contract).
- Authenticate users and secure accounts (legal basis: legitimate interests in security and fraud prevention).
- Communicate with you about the Service, including transactional emails and support (legal basis: performance of a contract / legitimate interests).
- Send product updates and marketing where permitted (legal basis: consent or legitimate interests; you can opt out at any time).
- Comply with legal obligations and enforce our Terms (legal basis: legal obligation / legitimate interests).
4. How we share information
We share personal information with:
- Service providers and subprocessors who help us operate the Service (cloud hosting, database, email delivery, analytics, customer support tooling), under contracts that require appropriate protection of personal information.
- Paddle.com, our Merchant of Record, for the sale of the Service, subscription management, payment processing, tax compliance, invoicing, and refund handling.
- Other project participants within the Service when you invite them to a project or interact with their submittals or RFIs.
- Professional advisers such as our lawyers, accountants, and auditors when needed.
- Authorities when required by law, subpoena, court order, or to protect the rights, safety, or property of Flowmittal, users, or others.
- Successors in connection with a merger, acquisition, financing, or sale of assets.
We do not sell your personal information.
5. Data retention
We retain personal information for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce agreements. Project content may be retained for the duration of the project plus a reasonable archival period, after which it is deleted or anonymized.
6. Security
We use appropriate technical and organizational measures to protect personal information, including encryption in transit, encryption at rest where applicable, access controls, and routine security review. No system is completely secure, however, and we cannot guarantee absolute security.
7. Cookies
We use essential cookies and similar technologies to keep you signed in, remember preferences, and secure the Service. We may also use limited analytics cookies to understand aggregate usage. You can control cookies through your browser settings; disabling essential cookies may break parts of the Service.
8. Your rights
Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. You may also have the right to withdraw consent where processing is based on consent. To exercise these rights, email legal@flowmittal.com. We will respond within the time required by applicable law.
9. International transfers
We are based in the United States and the Service is hosted on infrastructure that may store and process data in the United States and other countries. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for cross-border transfers.
10. Children
The Service is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
11. Changes to this Notice
We may update this Privacy Notice from time to time. If we make material changes, we will provide reasonable notice (for example, by email or an in-app notice).
12. Contact
Questions about this Privacy Notice or our handling of personal information? Email legal@flowmittal.com, or write to:
Flowmittal LLC
Minnesota, USA