Privacy Policy
Data Protection & Your Privacy Rights
At Flowen, we are committed to protecting your privacy and ensuring the security of your personal data. This policy explains how we collect, use, and safeguard your information in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
Information We Collect
Contact Information: We only collect the information you voluntarily provide through our contact forms, including your name, email address, and any message content.
Account Data: If you create an account, we collect your email address, name, and securely encrypted authentication information.
File Data: Files you upload are protected with enterprise-grade AES-256-GCM encryption and are only accessible to authorized users in your organization.
How We Use Your Information
- Communication: To respond to your inquiries and provide customer support
- Service Delivery: To provide access to Flowen's secure file management platform
- Security: To protect against unauthorized access and maintain platform integrity
- Legal Compliance: Only when required by applicable EU or local laws
Email Frequency: You will never receive more than one promotional email per month.
Enterprise-Grade Security
Flowen implements industry-leading security measures:
- AES-256-GCM Encryption: All files are encrypted with military-grade encryption
- Zero-Trust Architecture: Every access request is verified and authenticated
- GDPR Compliance: Full compliance with EU data protection regulations
- ISO 27001 Ready: Security controls meeting international standards
- Data Minimization: We only collect data necessary for service provision
Your GDPR Rights
Under GDPR, you have the right to:
- Access: Request information about your stored personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your personal data ("right to be forgotten")
- Portability: Receive your data in a machine-readable format
- Restriction: Limit how we process your data
- Objection: Object to processing based on legitimate interests
Data Retention
- Contact Form Data: Deleted after 2 years unless you become a customer
- Customer Account Data: Retained as long as your account is active
- File Data: Under your complete control - delete anytime
- Backup Data: Securely purged within 30 days of deletion request
For business customers, applicable EU accounting and business record requirements may extend certain retention periods.
International Data Protection
Flowen operates with a privacy-first approach across all EU member states:
- Data processing occurs within EU infrastructure
- No data sharing with non-EU entities without explicit consent
- Compliance with both GDPR and local data protection laws
- Regular security audits and compliance assessments
Contact & Data Protection Officer
For privacy questions, data requests, or to exercise your GDPR rights:
Email: privacy@flowen.eu
Response Time: Within 30 days as required by GDPR
Policy Updates
This policy is effective as of August 2025. We will notify you of any material changes and may require your consent for certain updates.
Last Updated: August 2, 2025
Next Review: February 2026
Flowen is committed to transparency, security, and your privacy rights. Our enterprise-grade platform ensures your data remains protected while providing powerful collaboration tools for your organization.
Have Privacy Questions?
Contact us directly about your data privacy concerns
🔒 Your data is processed securely and in full compliance with GDPR regulations.