The key principles at a glance: where Flowpeek runs, what role we play with respect to your customers' data and what happens to the data after your subscription ends. The details are set out in the privacy policy and the terms of service.
Servers in Germany
The Flowpeek app runs on dedicated Hetzner Online GmbH servers in Germany, within the European Economic Area. The flowpeek.pl website with its forms also runs on a Hetzner server in Germany, and messages from the contact form are also sent to our CRM on a server in Poland.
You are the controller of your customers' data
The store owner decides about the data of their visitors and customers. Flowpeek processes it on the owner's instructions as a processor, under a data processing agreement that defines the scope, safeguards, subprocessors and what happens after the service ends.
Only the data needed for analysis
Depending on the configuration: pseudonymous visit identifiers, page views, traffic sources, events, device parameters and order data. Email addresses, phone numbers and consent information reach Flowpeek only after Flowprofile is turned on. Tracking in the store does not set its own identifying cookie.
Consent of your store's customers
The store's controller decides the scope of tracking in the store. Tracking records the consent status, and marketing automations run on identified contacts with the appropriate consent.
When your subscription ends, the data is deleted
After your subscription expires, the dashboard is locked and you can restore it within 30 days. After that, the dashboard and all the data collected in it (traffic, events, orders, profiles, reports and AI chat history) are deleted. We keep a database backup for another 30 days solely so that we can restore the dashboard at your request, and then delete it permanently. Export the reports you need beforehand.
Flowask without database access
By default, Flowask uses the OpenAI API through Flowpeek's account. It sends the question, the latest messages of the conversation and a limited table of aggregated report results; the model has no access to the database and does not change any data. With your own API key, the data goes to the provider you choose (OpenAI or DeepSeek) under your account. The AI provider may process data outside the EEA.
Payments through Stripe
You enter your payment details in the Stripe form. The Flowpeek website does not store your full card number.
A website without ad pixels
We start Google Analytics 4 only after you consent in the cookie banner, with advertising features turned off. Website server logs are deleted after 7 days.
Documents
Questions about data protection?
Write to support@flowpeek.app. The full rules are set out in the documents listed here. Please don't send us passwords or API keys.