Privacy Policy
Last updated October 18, 2026
This policy explains what [LEGAL ENTITY NAME] ("FlowNext", "we") collects when you use flownext.co, why, and what you can do about it. We don't sell personal information, and we don't use it for advertising.
What we collect
Account information
Your email address, your name if you give it, your password (stored only as a one-way hash, never in readable form), and the organizations and roles you belong to.
What your organization records
Equipment, locations, categories, documents and photos you upload, maintenance records, and the activity history — including which user moved, scanned or reported a problem with an item, and when. Your organization controls this information; we process it on its behalf.
Location
A phone's position, with its accuracy, at the moment of a field update — see "Location" below.
Usage and technical information
The IP address of your current and previous sign-in, sign-in times and counts, when you were last active, and the server logs every web request produces (IP address, browser, the page requested, time).
Billing
When you subscribe, our payment processor Stripe collects your card details. We don't receive or store card numbers; we keep the Stripe customer and subscription identifiers and your plan's status.
The free QR sheet generator
The item names you type, kept with the sheet so it can be downloaded and later claimed. Until the sheet is claimed, anyone who scans one of its tags sees that tag's item name, so don't type anything private there.
How we use it
- To run the Service: sign you in, show your organization its data, and record activity.
- To send the emails the Service needs: sign-in links, invitations, inspection reminders, trial and billing notices. We don't send marketing email without your consent.
- To read uploaded documents automatically, on plans that include it (see below).
- To keep the Service secure, prevent abuse, fix problems and support you.
Who processes it for us
- DigitalOcean — hosts the Service, its database and uploaded files.
- Stripe — payments and subscriptions.
- Resend — delivers our emails.
- Google (Gemini API) — when a plan includes AI document reading, each uploaded document is sent to Google's Gemini API to read its dates and details, and the result is stored with the document.
We share information otherwise only if the law requires it, to protect people's safety or our rights, or as part of a merger or sale of the business, in which case this policy continues to apply.
Location
When an organization has field location turned on (the default; its owners can turn it off), a field user's phone shares its position at the moment they move an item, report a problem or log hours from a tag page, if they allow the browser to. It's saved with that history entry, visible to the organization's office users, and used to learn where its yards and jobsites are so they can be suggested next time. We never read location in the background or between updates, and the tag page says when it's on.
Tag pages
Anyone who scans a FlowNext tag sees the name of the organization it belongs to. Equipment details are shown only to signed-in members of that organization.
Cookies
We use only cookies the Service needs. We don't use advertising or third-party tracking cookies.
_flownext_session— keeps you signed in during a visit.remember_user_token— keeps you signed in on that device for up to a year, so field users aren't asked to sign in on a jobsite.tag_sheets— remembers, for 90 days, which free QR sheets this browser printed, so only that browser is offered to claim them.
How long we keep it
We keep an organization's data while its account exists, including after a trial or subscription ends, so it can be exported or resumed. When an owner asks us to delete the organization, we delete its data within 30 days. Server logs are kept for a limited period for security and troubleshooting.
Security
All traffic to flownext.co is encrypted with HTTPS, passwords are stored as one-way hashes, card details stay with Stripe, and every record is scoped to its organization. No system is perfectly secure; if we learn of a breach affecting your information, we'll notify you as the law requires.
Your choices and rights
- Export: your organization's equipment and full history download as CSV from within the app.
- Correct: most information can be edited in the app.
- Delete: email support@flownext.co to delete your account or, if you're an owner, your organization.
- Depending on where you live, you may have further rights, such as to access or object to the processing of your information. Email us and we'll respond within the time the law allows.
If you're a member of an organization, some requests about its data go through its owners, since they control it.
Children
FlowNext is a business tool and isn't meant for anyone under 16.
Changes
If we change this policy materially, we'll email organization owners before the change takes effect.
Contact
[LEGAL ENTITY NAME], [MAILING ADDRESS] · support@flownext.co