Privacy Policy

Last updated: August 30, 2026

Flow Workspace is built to collect as little of your data as possible. This page describes exactly what does and doesn't happen with your information.

What we don't do

This site has no user accounts and no database. We don't store your name, email, or any personal profile on our own servers, because there's no server-side storage for us to put it in.

Payment information

When you subscribe, payment is handled entirely by PayPal. We never see or store your card, bank, or PayPal login details. We receive only a subscription identifier from PayPal, which our server uses to confirm your subscription is active before releasing the download — that identifier is passed in the page URL after checkout and is not logged or stored anywhere on our end. PayPal's handling of your payment data is governed by PayPal's own Privacy Policy.

Analytics and performance monitoring

We use Vercel Web Analytics and Vercel Speed Insights to understand aggregate traffic (e.g. how many people visit a page) and page-load performance. Both are designed to be privacy-friendly: they don't use tracking cookies and don't build an individual profile of you across visits or other sites.

Cookies and local storage

We set exactly one cookie of our own: a locale cookie that remembers whether to show this site in English or Hebrew. Its value is either “en” or “he” — nothing else, and nothing tied to your identity. It's set automatically on your first visit, based on your country as seen by our hosting provider's network (so Israeli visitors see Hebrew by default), and updates if you use the language toggle. The same preference is also saved in your browser's local storage as a backup. Beyond that, PayPal may set its own cookies during checkout as part of its own fraud-prevention and session handling — that's governed by PayPal's privacy policy, linked above, not this one.

Third parties we use

• PayPal — payment processing and subscription billing.
• Vercel — hosting, edge network (including the country-detection used for the language default above), and the analytics/performance monitoring described above.

We don't sell or share your data with advertisers, because we don't collect any to begin with.

Your rights (all visitors)

Since we don't hold personal data on our own systems, most data requests (access, deletion, correction) are actually requests to PayPal about your payment/subscription data. We're happy to help point you in the right direction — contact us at support@flow.workspace4u.com.

European Economic Area, UK, and Switzerland (GDPR)

If you're located in the EEA, UK, or Switzerland, the following applies in addition to the section above. Where we process any data about you (for example, the analytics events described above, or a subscription identifier used to check your access), we do so on the basis of our legitimate interest in operating and securing the service, or as necessary to perform the contract when you subscribe. We don't rely on your consent for anything described in this policy, since we don't use tracking or advertising cookies.

You have the right to:

• request access to any personal data we hold about you;
• request that we correct or delete it;
• request that we restrict or object to how it's processed, including in relation to legitimate-interest processing above;
• request a portable copy of it; and
• lodge a complaint with your local data protection supervisory authority, if you believe we've mishandled your data.

In practice, because we hold so little data ourselves, most requests will point you toward PayPal (for payment data) — contact support@flow.workspace4u.com and we'll help route it correctly. Our hosting provider, payment processor, and analytics providers may process data outside the EEA/UK (including in the United States); each relies on its own safeguards for that transfer (such as Standard Contractual Clauses) under its own privacy policy, linked above.

California residents (CCPA/CPRA)

The California Consumer Privacy Act, as amended, gives California residents specific rights over their personal information. We collect only what's described in this policy — a payment processor's subscription identifier, and aggregate, non-identifying analytics events — and we do not sell or share personal information as those terms are defined under the CCPA. Because of that, there's no “Do Not Sell or Share My Personal Information” link on this site — there is nothing to opt out of. California residents still have the right to:

• know what personal information we've collected about you;
• request deletion of that information;
• request correction of inaccurate information; and
• not be discriminated against for exercising any of these rights — we won't deny you the service, charge you a different price, or provide a different level of service because you made a request.

To exercise any of these rights, contact support@flow.workspace4u.com. We may need to point certain requests toward PayPal if they concern payment data PayPal holds rather than us.

Changes to this policy

If this policy changes — for example, if we add a new analytics or payment provider — we'll update this page and the “Last updated” date above.

Contact

Questions about this policy? Reach us at support@flow.workspace4u.com.