1. Personal information we process
We may process the following information to provide the service. (Items may change depending on service screens and policies.)
| Category | Items | Collection method |
|---|---|---|
| Sign-up (required) | Email address, password (stored securely/encrypted), account identifier | User input |
| Service usage | Access logs, usage logs, device/app version, IP address, auth tokens/cookies (session persistence) | Automatically generated during use |
| Payments (paid plans) | Payment identifier, payment status/history (payment method details are stored by the payment processor) | Generated during payment process |
| Support | Inquiry contents, email address, attachments (if provided) | Email/community inquiry |
We do not intentionally collect resident registration numbers or sensitive information (e.g., health, political opinions).
2. Purposes of processing
- Identify users, confirm sign-up intent, and process login (email-based login)
- Provide the service (Workflows, Marketplace, Autopilot operations)
- Billing, payment processing, and refunds (for paid usage)
- Respond to inquiries, deliver notices, and handle disputes
- Improve service quality, handle incidents, and prevent abuse/fraud
3. Retention period
We delete personal information without delay when the purpose of processing is achieved, unless retention is required by law or necessary for internal operations.
- Account information: until account deletion (minimum data may be retained for a limited period to prevent abuse where necessary)
- Payment/billing records: for the period required by applicable e-commerce and tax laws
- Support inquiry records (email/cafe): retained for 3 years after completion (for dispute handling)
- Service operation logs (excluding sensitive data): retained up to 1 year (for stability/security)
4. Sharing with third parties
We do not share your personal information with third parties in principle.
We may do so only when required by law or with your prior consent where applicable.
5. Outsourcing (processors)
We may outsource certain tasks to third-party service providers to operate the service. When outsourcing, we enter into agreements and supervise processors in accordance with applicable laws.
| Processor | Scope | Retention |
|---|---|---|
| Toss Payments | Payment processing and payment record management | As required by law and contract |
| Host Center | Server infrastructure operations (Korea-based servers) | Until the outsourcing agreement ends |
6. Cross-border transfer
We currently operate the service using Korea-based servers and do not transfer personal information overseas in principle.
If cross-border transfer occurs in the future, we will provide notice and obtain consent if required by applicable laws.
7. Your rights
- You may request access, correction, deletion, or restriction of processing of your personal information.
- Requests can be submitted through the “Contact” section of this policy.
- We will respond without undue delay in accordance with applicable laws. Certain requests may be limited by law.
8. Security measures
- Encryption in transit (TLS)
- Least-privilege access control and internal access restrictions
- Secure storage of authentication information (encryption/hashing, etc.)
- Security vulnerability and incident response procedures
- Minimization of personnel who can access personal information
9. Cookies / access logs
The web service may use cookies or similar technologies (e.g., tokens) to maintain login sessions and improve security.
You can refuse or delete cookies in your browser settings (some features may be limited).
10. Local storage vs server storage (Flow Browser characteristics)
Flow Browser includes both “local execution on your PC” and “operational data stored on the server.” Below is a summary of the default policy.
10.1 Data not sent to the server (stored locally only)
- Execution logs on the user’s computer
- TypeHidden (hidden-field) text — sensitive inputs are stored locally only and are not transmitted to the server.
10.2 Data stored on the server
- Workflows (for sync/backup/market distribution)
- Screenshots (for image matching) — captures stored for automation stability
- Autopilot execution metadata — success/failure and operational metadata
※ Actual stored items and retention periods may change with updates. Material changes will be announced.
11. Contact
Privacy officer
신홍재
Business / Entity
액션드라이브 (Sole Proprietor)
Email
Support channel
Address
경기도 부천시 원미구 상동로 113, 801호