Skip to content
flowpeek
flowpeek
Try free for 30 daysBook a demo(30 minutes online, opens in a new tab)

30 days for PLN 0 · first payment after the trial · cancel anytime

flowpeeksecurity and GDPR

Data security and GDPR.

The key principles at a glance: where Flowpeek runs, what role we play with respect to your customers' data and what happens to the data after your subscription ends. The details are set out in the privacy policy and the terms of service.

Servers in Germany

The Flowpeek app runs on dedicated Hetzner Online GmbH servers in Germany, within the European Economic Area. The flowpeek.pl website with its forms also runs on a Hetzner server in Germany, and messages from the contact form are also sent to our CRM on a server in Poland.

You are the controller of your customers' data

The store owner decides about the data of their visitors and customers. Flowpeek processes it on the owner's instructions as a processor, under a data processing agreement that defines the scope, safeguards, subprocessors and what happens after the service ends.

Only the data needed for analysis

Depending on the configuration: pseudonymous visit identifiers, page views, traffic sources, events, device parameters and order data. Email addresses, phone numbers and consent information reach Flowpeek only after Flowprofile is turned on. Tracking in the store does not set its own identifying cookie.

Consent of your store's customers

The store's controller decides the scope of tracking in the store. Tracking records the consent status, and marketing automations run on identified contacts with the appropriate consent.

When your subscription ends, the data is deleted

After your subscription expires, the dashboard is locked and you can restore it within 30 days. After that, the dashboard and all the data collected in it (traffic, events, orders, profiles, reports and AI chat history) are deleted. We keep a database backup for another 30 days solely so that we can restore the dashboard at your request, and then delete it permanently. Export the reports you need beforehand.

Flowask without database access

By default, Flowask uses the OpenAI API through Flowpeek's account. It sends the question, the latest messages of the conversation and a limited table of aggregated report results; the model has no access to the database and does not change any data. With your own API key, the data goes to the provider you choose (OpenAI or DeepSeek) under your account. The AI provider may process data outside the EEA.

Payments through Stripe

You enter your payment details in the Stripe form. The Flowpeek website does not store your full card number.

A website without ad pixels

We start Google Analytics 4 only after you consent in the cookie banner, with advertising features turned off. Website server logs are deleted after 7 days.

Documents

Questions about data protection?

Write to support@flowpeek.app. The full rules are set out in the documents listed here. Please don't send us passwords or API keys.

Questions about the data in your store? Let's go through them in a demo.

30 days for PLN 0 · first payment after the trial · cancel anytime